An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9075.json"