CVE-2018-20712

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1

published January 15, 2019

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02675 · 85.7th percentile
Published
2019-01-15T00:00Z
EPSS history
Timeline
  • 15 JAN 00:00Z
    A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1
    cvelistv5