CVE-2019-19203

CVE-2019-19203 affects the Oniguruma regular expressions library (version 6.x) prior to 6.9.4_rc2. The vulnerability arises in gb18030_mbc_enc_len (gb18030.c) where a UChar pointer is dereferenced without ensuring the pointer is within the end of the matched string, causing a heap-based buffer ov...