sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2019-15165.json"