Medium severity6.5OSV Advisory· Published Dec 22, 2018· Updated Jun 17, 2026

CVE-2018-20349

Description

The igraph_i_strdiff function in igraph_trie.c in igraph through 0.7.1 has an NULL pointer dereference that allows attackers to cause a denial of service (application crash) via a crafted object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Igraph/IgraphOSV2 versions
0.7.0, 0.7.1, 0.7.1-post+ 1 more
- (no CPE)range: 0.7.0, 0.7.1, 0.7.1-post
- (no CPE)range: <=0.7.1

Patches

Vulnerability mechanics

References

github.com/igraph/igraph/issues/1141nvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2019/12/msg00038.htmlnvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NCGDUNQYLSZLSGN6JJBORVFW46U3A75Y/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OWCGXEINKJM3JQUPVCSN4RBTRKWBTYI7/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000