CVE-2019-11838

2019-05-0914:29:00

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.

CPENameOperatorVersion
njseq0.2.2
njseq0.2.7
njseq0.2.8
njseq0.1.12
njseq0.1.0
njseq0.2.6
njseq0.1.4
njseq0.2.3
njseq0.1.1
njseq0.1.2

Name	Operator	Version
njs	eq	0.2.2
njs	eq	0.2.7
njs	eq	0.2.8
njs	eq	0.1.12
njs	eq	0.1.0
njs	eq	0.2.6
njs	eq	0.1.4
njs	eq	0.2.3
njs	eq	0.1.1
njs	eq	0.1.2

Rows per page:

1-10 of 271

References

github.com/nginx/njs/issues/153