CVE-2019-14274: MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

Security readout for executives and security teams

CVE-2019-14274 is a heap-based buffer overflow in MCPP 2.7.2, a C preprocessor. In practical terms, vulnerable systems are most relevant where MCPP processes attacker-controlled or untrusted input. Public sources do not provide a CVSS score, confirmed exploitation, or detailed business impact, so urgency depends on whether MCPP is present and exposed to untrusted files. Exposure is likely limited to systems with MCPP 2.7.2 installed, especially developer, build, packaging, or CI environments that invoke MCPP. Risk is higher if MCPP processes files supplied by users, external projects, or automated dependency workflows. The bundle does not identify broader affected versions or CPEs. Prioritize as an exposure-discovery item unless MCPP handles untrusted inputs in production or CI. There is no cited active exploitation or severity score, but memory corruption in a build tool can matter where external code or files are processed automatically. Mitigation focus: Inventory systems and build environments for MCPP 2.7.2.; Apply applicable openSUSE or Gentoo security updates where those packages are used.; For other distributions, check current vendor or upstream MCPP guidance..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.