parseaudiomixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-15117.json"