← All advisories

High severity7.8NVD Advisory· Published Jul 1, 2021· Updated Jun 17, 2026

CVE-2018-25018

CVE-2018-25018

Description

UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Rarlab/Unrar2 versions
cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rarlab:unrar:*:*:*:*:*:*:*:*range: >=5.6.1.7,<=5.7.4
- cpe:2.3:a:rarlab:unrar:6.0.3:*:*:*:*:*:*:*
UnRAR/UnRARdescription
Aawc/unrarllm-create
Range: 5.6.1.7 - 6.0.3

Patches

Vulnerability mechanics

References

3

bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingPatchThird Party Advisory
github.com/aawc/unrar/releasesnvdRelease NotesThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2018-204.yamlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.