CVE-2019-18218

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte…

published October 21, 2019

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01850 · 78.9th percentile
Published
2019-10-21T04:41Z
EPSS history
Timeline
  • 21 OCT 04:41Z
    cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte…
    cvelistv5