Lucene search

K
cvelistMitreCVELIST:CVE-2018-14337
HistoryJul 17, 2018 - 3:00 a.m.

CVE-2018-14337

2018-07-1703:00:00
mitre
www.cve.org
1

8.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length.

8.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%