« List of all CVEs

CVE-2019-19203

Published: 11/21/2019 Last updated: 8/5/2024 Reserved: 11/21/2019

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-oniguruma

Products affected (1)

Product Vendor Version
n/a n/a n/a

References (12)