CVE-2019-6286

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a…

published January 14, 2019

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02115 · 81.7th percentile
Published
2019-01-14T22:00Z
EPSS history
Timeline
  • 14 JAN 22:00Z
    In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a…
    cvelistv5