VYPR
High severity8.8OSV Advisory· Published May 13, 2018· Updated Jun 17, 2026

CVE-2018-11017

CVE-2018-11017

Description

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Affected products

2
  • Libming/LibmingOSV2 versions
    ming-0_3_0, ming-0_3_beta2, ming-0_4_0_beta3, …+ 1 more
    • (no CPE)range: ming-0_3_0, ming-0_3_beta2, ming-0_4_0_beta3, …
    • (no CPE)range: <=0.4.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.