The commit eda95c9c22b4f0b466ae94c4708765eaae6e709e was already covered by CVE-2018-19801. Reassigned back.