CVE-2019-11838

published 2019-05-09

CVE-2019-11838: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
f5	njs	<= 0.3.1	—

CWE-787