Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-19204. PoCs published by ManhNDd, tarantula-team.
AI-analyzed exploit summary The repository contains a functional proof-of-concept exploit for CVE-2019-19204, demonstrating a heap-based buffer over-read in Oniguruma's `fetch_interval_quantifier` function due to improper bounds checking. The PoC includes a C program that triggers the vulnerability, along with compilation instructions and a detailed crash log from AddressSanitizer.
Description
An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.
Exploits (2)
The repository contains a functional proof-of-concept exploit for CVE-2019-19204, demonstrating a heap-based buffer over-read in Oniguruma's `fetch_interval_quantifier` function due to improper bounds checking. The PoC includes a C program that triggers the vulnerability, along with compilation instructions and a detailed crash log from AddressSanitizer.
The repository contains a functional proof-of-concept exploit for CVE-2019-19204, demonstrating a heap-based buffer over-read in Oniguruma's `fetch_interval_quantifier` function due to improper bounds checking. The PoC includes a C program that triggers the vulnerability, along with compilation instructions and a detailed crash log from AddressSanitizer.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H