CVE-2018-17942

CVE-2018-17942 affects Gnulib’s convert_to_decimal (vasnprintf.c): a heap-based buffer overflow caused by not allocating space for the trailing null during %f processing. It impacts Gnulib prior to 2018-09-23; OSV and related advisories note a security update/fix. The CVSSv3 vector is CVSS:3.0/AV...