Description
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.
Unscored
CVE-2019-11838
EUVD-2019-3501GHSA-5cqj-x29q-49hf
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype…
Published May 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre