fixes for CVE-2019-14232 to 14235