CVE-2019-6283

MEDIUM

Sass-lang Libsass - Out-of-Bounds Read

Title source: rule

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.

Core 4

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link vendor-advisory x_refsource_suse

Broken Link vendor-advisory x_refsource_suse

Broken Link vendor-advisory x_refsource_suse

CVSS v3 6.5

EPSS 0.0028

EPSS Percentile 51.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-125

Status published

Products (1)

sass-lang/libsass 3.5.5

Published Jan 14, 2019

Tracked Since Feb 18, 2026