In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9895.json"