Out-of-Bounds Write in uriparser Affects URI Parsing on Various Platforms

CVE-2018-19198

What is CVE-2018-19198?

An out-of-bounds write vulnerability exists in the uriparser library, specifically in the UriQuery.c file, where improper handling of the '&' character in certain contexts can lead to arbitrary memory writes during the execution of uriComposeQuery* or uriComposeQueryEx* functions. This flaw may allow attackers to exploit the library in applications that utilize it, potentially resulting in various security implications depending on the context in which the library is deployed. It is crucial for users of affected versions to upgrade to version 0.9.0 or later to mitigate this risk.

References