An issue was discovered in The Sleuth Kit (TSK) 4.6.6. There is an out of bounds read on iso9660 while parsing System Use Sharing Protocol data in fs/iso9660.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14531.json"