Search vulnerabilities

Results 1

Export CSV
CVE-2018-17942

gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c

The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Gnu
Products