A memory leak in the af9005identifystate() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-18809.json"