An issue was discovered in cpp-peglib through v0.1.12. peg::resolveescapesequence() in peglib.h has a heap-based buffer over-read.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-23915.json"
[
{
"target": {
"function": "codepoint_length",
"file": "peglib.h"
},
"id": "CVE-2020-23915-8629b90c",
"deprecated": false,
"signature_type": "Function",
"source": "https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e",
"signature_version": "v1",
"digest": {
"function_hash": "73004964111901588551179169896409950747",
"length": 335.0
}
},
{
"target": {
"file": "peglib.h"
},
"id": "CVE-2020-23915-988a499c",
"deprecated": false,
"signature_type": "Line",
"source": "https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e",
"signature_version": "v1",
"digest": {
"line_hashes": [
"305731826359281247296869654299113449651",
"339036016034052883856440544981514003458",
"56011554680543042233893566455295825915",
"255636933513162664645131821946322598403",
"57542540629536009684787878544379393432",
"312831212263277916743638332390265291222",
"204655458009423361391753162629023155560",
"37513945751004088926040296577665629182"
],
"threshold": 0.9
}
}
]