PBC buffer overflow vulnerability

PBC is a Google protocol buffer library written in C. A buffer overflow vulnerability exists in the pbcMipnew file of the map.c file of the libpbc.a static link library in PBC 2017-03-02 and earlier versions. An attacker can exploit this vulnerability to cause a buffer out-of-bounds read...

CVE-2018-12918

In libpbc.a in PBC through 2017-03-02, there is a Segmentation fault in pbcBregisterfields in bootstrap.c...

CVE-2018-12917

In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...