2 matches found
Integer overflow
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
5CVSS7.6AI score0.01392EPSS
SaveExploits1References2Affected Software2
CVE-2018-14337: Integer Overflow or Wraparound
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrbstrresize function in string.c does not check for a negative length...
7.5CVSS7.3AI score0.01392EPSS
SaveExploits1References2
20