Unrated
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
CVE-2019-16162
First seen on SecPulse
References
- report github.com