CVE-2019-6283 - In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp

MEDIUM

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp

Published Jan 14, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.91%

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html		vendor-advisoryx_refsource_SUSEBroken Link
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html		vendor-advisoryx_refsource_SUSEBroken Link
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html		vendor-advisoryx_refsource_SUSEBroken Link
https://github.com/sass/libsass/issues/2814		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 14, 2019

Updated Aug 4, 2024

Reserved Jan 14, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a