CVE-2019-19204

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2

published November 21, 2019

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06889 · 94.1th percentile
Published
2019-11-21T20:06Z
EPSS history
Timeline
  • 21 NOV 20:06Z
    An issue was discovered in Oniguruma 6.x before 6.9.4_rc2
    cvelistv5