ALPINE-CVE-2018-18585

chmdreadheaders in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second character such as the "/\0" name...

DEBIAN-CVE-2018-14679

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service uninitialized data dereference and application crash...

Libmspack Memory Corruption Vulnerability

Libmspack is a library that compresses and decompresses files in Microsoft's CAB, CHM and HLP formats. A memory corruption vulnerability exists in Libmspack. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service to an application...