What’s Vulnerable › Vulnerabilities

CVE-2019-5038

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-20 · updated 2026-06-17
• Weakness: CWE-121

Description

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave command.

Affected products

• Openweave-Core: 4.0.2

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0801
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0801

Get alerted when CVE-2019-5038 or the next vulnerability affects your stack