Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
Source: NIST
CVE-2019-16162 (onigmo)
Security in mind
Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
Source: NIST
CVE-2019-16162 (onigmo)