CVE-2019-19012

CRITICAL

Oniguruma <6.9.4_rc2 - Memory Corruption

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2019-19012. PoCs published by ManhNDd, tarantula-team.

AI-analyzed exploit summary The repository contains a functional PoC in C that demonstrates an integer overflow vulnerability in Oniguruma's search_in_range function, leading to an out-of-bounds read. The PoC is well-documented with compilation instructions and a trigger example.

Description

An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.

Exploits (2)

nomisec WORKING POC 4 stars
by ManhNDd · poc
https://github.com/ManhNDd/CVE-2019-19012

The repository contains a functional PoC in C that demonstrates an integer overflow vulnerability in Oniguruma's search_in_range function, leading to an out-of-bounds read. The PoC is well-documented with compilation instructions and a trigger example.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Oniguruma 6.x before 6.9.4_rc2 (32-bit compiled version)
No auth needed
Prerequisites: 32-bit compilation environment · Oniguruma library
devstral-2 · analyzed Feb 19, 2026 Full analysis →
nomisec WORKING POC
by tarantula-team · poc
https://github.com/tarantula-team/CVE-2019-19012

The repository contains a functional C-based PoC for CVE-2019-19012, demonstrating an integer overflow in Oniguruma's regexec.c leading to an out-of-bounds read. The PoC includes detailed compilation instructions and a trigger pattern to reproduce the crash.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Oniguruma 6.x before 6.9.4_rc2 (32-bit)
No auth needed
Prerequisites: 32-bit compilation environment · Oniguruma library compiled with AddressSanitizer
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/kkos/oniguruma/issues/164
Third Party Advisory x_refsource_misc
https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2
Exploit, Third Party Advisory x_refsource_misc
https://github.com/tarantula-team/CVE-2019-19012
Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4460-1/

Scores

CVSS v3 9.8
EPSS 0.1054
EPSS Percentile 95.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-125 CWE-190
Status published
Products (6)
debian/debian_linux 8.0
fedoraproject/fedora 30
fedoraproject/fedora 31
oniguruma_project/oniguruma 6.9.4 rc1
oniguruma_project/oniguruma 6.0.0 - 6.9.3
redhat/enterprise_linux 8.0
Published Nov 17, 2019
Tracked Since Feb 18, 2026