← Back

Gnulib

gnulib

Vendor: Gnu • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-17942
1Gnu
1Gnulib
Nov 21, 2024
Oct 3, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The convert_to_decimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing.