A buffer overflow in DOSBox 0.74-2 allows attackers to execute arbitrary code.
CVE-2019-7165 (Candidate) is related to these bugs: