Onigmo up to and including 6.2.0 has an out-of-bounds read in parse_char_class because of missing codepoint validation in regenc.c.
k-takata onigmo