CVE-2019-19012

CVE-2019-19012 is a critical integer overflow vulnerability affecting Oniguruma 6.x before 6.9.4_rc2, specifically in 32-bit compiled versions. This flaw, present in the search_in_range function, allows an attacker to trigger an out-of-bounds read via a crafted regular expression, impacting products like Debian, Fedora, and Red Hat. With a CVSS score of 9.8, this vulnerability is easily exploitable remotely without user interaction, potentially leading to denial-of-service, information disclosure, or other severe impacts. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.