CVE-2018-18584

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading…

published October 23, 2018

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02662 · 85.6th percentile
Published
2018-10-23T00:00Z
EPSS history
Timeline
  • 23 OCT 00:00Z
    In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading…
    cvelistv5