repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema. CREATE(Triage):(User=admin) [CVE-2019-20387|https://nvd.nist.gov/vuln/detail/CVE-2019-20387]
