CVE-2018-1000052

fmtlib version prior to version 4.1.0 (before commit
0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption
(SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can
result in Denial of Service. This attack appear to be exploitable via
Specifying an invalid format specifier in the fmt::print() function results
in a SIGSEGV (memory corruption, invalid write). This vulnerability appears
to have been fixed in after commit
8cf30aa2be256eba07bb1cefb998c52326e846e7.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890033&gt;