A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-9894.json"