CVE-2018-12917 In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c.
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in _pbcM_ip_new in map.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pbc project pbc | <= 20170302 | No fix listed |
References
- github.com issue-tracking third-party-advisory