OSV-2022-40 UNKNOWN READ in md_build_attribute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43587 Crash type: UNKNOWN READ Crash state: mdbuildattribute mdenterleavespana mdprocessnormalblockcontents...

CVE-2018-12112

The vulnerability CVE-2018-12112 affects md4c 0.2.6. Root cause: the function md_build_attribute in md4c.c allows a crafted file to trigger a denial of service (segmentation fault and application crash) and possibly other impact. Impact is a crash/DoS; exploitation is remote via crafted input. No...

CVE-2018-12112: Improper Restriction of Operations within the Bounds of a Memory Buffer

mdbuildattribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact via a crafted file...