CVE-2020-23915

CVE-2020-23915 affects the cpp-peglib library (header-only PEG parser) and is caused by a heap-based buffer over-read in peg::resolve_escape_sequence() implemented in peglib.h, impacting v0.1.12 and earlier. The vulnerability is documented across multiple connected sources (NVD and OSV entries) w...

CVE-2020-23914

CVE-2020-23914 affects cpp-peglib (v0.1.12). A NULL pointer dereference in peg::AstOptimizer::optimize() (peglib.h) allows a Denial of Service. Connected sources corroborate the issue across multiple feeds; no patch/remediation details are provided in the supplied documents. Summary: vulnerable c...