CVE-2018-18585

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name)

published October 23, 2018

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02964 · 87.1th percentile
Published
2018-10-23T00:00Z
EPSS history
Timeline
  • 23 OCT 00:00Z
    chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character (such as the "/\0" name)
    cvelistv5