Back to board Open MSRC
MSRC compact vulnerability detail

CVE-2018-19797 · In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.

No description was published by MSRC.

Severity
n/a
Impact
n/a
CVSS
n/a base · n/a temporal
Release
2025-11-27
Signals
Mariner Unknown impact Exploited: n/a Publicly disclosed: n/a Exploitability: n/a
CWE
CWE-476: NULL Pointer Dereference
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Old version New version
Description
No description was published by MSRC.
FAQ / Articles
No FAQ or article content was published.