Lucene search

K
osvGoogleOSV:CVE-2018-14337
HistoryJul 17, 2018 - 3:29 a.m.

CVE-2018-14337

2018-07-1703:29:00
Google
osv.dev
4

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length.

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%