CVE-2018-8778

A integer underflow was found in the way Stringunpack decodes the unpacking format. An attacker, able to control the unpack format, could use this flaw to disclose arbitrary parts of the application's memory. Mitigation Vulnerable code when Stringunpacks argument is attacker controlled. In the...

CVE-2015-8925

A vulnerability was found in libarchive. A specially crafted MTREE file could cause a small out-of-bounds read, potentially disclosing a small amount of application memory...