CVE-2018-16982 Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
MediumCVSS 5.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm opencc(npm) | < 1.1.2 | 1.1.2 |
| byvoid open chinese convert | = 1.0.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com exploit vendor-advisory
- github.com patch
- github.com patch
- github.com patch
- github.com patch
- github.com
- github.com