njs through 0.3.3, used in NGINX, has a buffer over-read in nxtutf8decode in nxt/nxtutf8.c. This issue occurs after the fix for CVE-2019-12207 is in place...
9.8CVSS9.6AI score0.01597EPSS
SaveExploits1References3
OSV•added 2022/02/14 10:15 p.m.•7 views
ALPINE-CVE-2021-46463
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njspromiseperformthen...
