Add information on CVE-2018-120{19,20}