CVE-2020-11958

Name of the Vulnerable Software and Affected Versions re2c version 1.3

Description The issue is a heap-based buffer overflow in the Scanner::fill function located in parse/scanner.cc, which can be triggered by a long lexeme.

Recommendations For re2c version 1.3, consider restricting the input length to prevent the buffer overflow until a patch is available. As a temporary workaround, avoid using long lexemes in the Scanner::fill function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.