Description
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array.c, because of njs_array_expand size mishandling.
Unscored
CVE-2019-11839
EUVD-2019-3502GHSA-585q-jwfj-chw8
njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_p…
Published May 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre