CVE-2018-17427

SIMDComp (C library for binary packing) is affected by CVE-2018-17427. Versions before 0.1.0 allow remote attackers to cause a denial of service via a heap-based buffer over-read by reading (and then discarding) extra bytes, leading to application crashes. Public reports in CNVD/OSV/CVE records c...

CVE-2018-17854

CVE-2018-17854 concerns the SIMDComp library: versions before 0.1.1 are vulnerable to a denial-of-service via a heap-based buffer over-read caused by reading (and discarding) extra bytes. The issue stems from an incomplete fix related to CVE-2018-17427. Impact is DoS (application crash) with netw...