re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.
[
{
"digest": {
"length": 689.0,
"function_hash": "333593729438856307916757536742331749380"
},
"target": {
"file": "src/parse/scanner.cc",
"function": "Scanner::fill"
},
"signature_type": "Function",
"id": "CVE-2020-11958-1ed4ef83",
"signature_version": "v1",
"source": "https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"49856157583685485338382242415855956217",
"62389220857190960901324283129598467832",
"184037409826309927940272893902015140416",
"273502829212453987266105187472144333968",
"61068454445922609334293328596814080330",
"171489683377489733976258294719111059476",
"63121316251367159155147134380828191841",
"239987518835152770604035393540266182148"
],
"threshold": 0.9
},
"target": {
"file": "src/parse/scanner.cc"
},
"signature_type": "Line",
"id": "CVE-2020-11958-ff60d1f0",
"signature_version": "v1",
"source": "https://github.com/skvadrik/re2c/commit/c4603ba5ce229db83a2a4fb93e6d4b4e3ec3776a",
"deprecated": false
}
]