CVE-2019-16162

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Onigmo through 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-161637.5Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.CVE-2019-161646.5MyHTML through 4.0.5 has a NULL pointer dereference in myhtml_tree_node_remove in tree.c.CVE-2019-161656.5GNU cflow through 1.6 has a use-after-free in the reference function in parser.c.CVE-2019-161666.5GNU cflow through 1.6 has a heap-based buffer over-read in the nexttoken function in parser.c.CVE-2019-161675.5sysstat before 12.1.6 has memory corruption due to an Integer Overflow in remap_struct() in sa_common.c.CVE-2019-161686.5In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqCVE-2019-16177.4A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could CVE-2019-161707.1An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has IncCVE-2019-161716.1In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.CVE-2019-161725.4LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attackCVE-2019-161735.4LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This ocCVE-2019-161748.8An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and
CVE-2019-16162: High severity, CVSS 7.5 | Vulnix