Nginx · Njs · CVE-2019-12207
**Name of the Vulnerable Software and Affected Versions**
njs versions prior to 0.3.2
**Description**
The issue is related to a heap-based buffer over-read in the nxt utf8 decode function, located in nxt/nxt utf8.c. This function is part of njs, which is used in NGINX.
**Recommendations**
For versions prior to 0.3.2, update to version 0.3.2 or later to resolve the issue.