CVE-2019-11838: Out-of-bounds Write

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njsarrayprototypesplice in njs/njsarray.c, because of njsarrayexpand size mishandling...

PT-2019-12520

Name of the Vulnerable Software and Affected Versions njs versions prior to 0.3.2 Description The issue is related to a segmentation fault in String.prototype.toBytes for negative arguments. It is connected to the functions nxt utf8 next in nxt/nxt utf8.h and njs string offset in njs/njs string.c...

PT-2019-12522

Name of the Vulnerable Software and Affected Versions njs versions through 0.3.1 Description The issue is related to a heap-based buffer overflow in Array.prototype.push after a resize. This is due to mishandling of the njs array expand size in the njs array prototype push function located in...

CVE-2019-11839: Out-of-bounds Write

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njsarrayprototypepush in njs/njsarray.c, because of njsarrayexpand size mishandling...

CVE-2019-11837: Undefined Security Weakness

njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxtutf8next in nxt/nxtutf8.h and njsstringoffset in njs/njsstring.c...