This vulnerability in F5's NGINX Plus involves the ngx_http_rewrite_module where overlapping Perl-Compatible Regular Expression captures in rewrite directives can lead to a heap-based buffer overflow. The issue arises when the replacement string references multiple overlapping captures, enabling an attacker to send crafted HTTP requests that trigger the overflow. The impact includes worker process restarts and potential code execution on systems without effective ASLR protections. The CVSS v3.1 score is 8.1, indicating high severity. Affected versions are 37.0, R36, and R32. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Exploitation can cause the NGINX worker process to crash and restart, resulting in denial of service. On systems where ASLR is disabled or can be bypassed, attackers may achieve remote code execution, leading to full compromise of the affected system. The vulnerability requires no privileges or user interaction but has a high attack complexity due to specific conditions in regex usage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using rewrite directives with overlapping PCRE captures and multiple references in replacement strings in redirect or arguments contexts. Monitor vendor communications for updates on patches or official mitigations.