An issue was discovered in cpp-peglib through v0.1.12. peg::resolve_escape_sequence() in peglib.h has a heap-based buffer over-read.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23915
Reference (s):
- https://github.com/yhirose/cpp-peglib/commit/b3b29ce8f3acf3a32733d930105a17d7b0ba347e
- https://github.com/yhirose/cpp-peglib/issues/122