CVE-2018-11226

2022-10-0316:21:51

mitre

www.cve.org

libming

getstring function

file size

remote attackers

denial of service

segmentation fault

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

JSON

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.