PT-2018-12658

CVE-2018-14682

·

Published

2016-02-07

·

Updated

2026-09-18

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.7alpha
Description An issue was discovered in the CHM decompression functionality of libmspack, specifically in the mspack/chmd.c file. The problem lies in an off-by-one error within the TOLOWER() macro.
Recommendations For versions prior to 0.7alpha, update to version 0.7alpha or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-193: Off-by-one Error
Related identifiers
CVE-2018-14682
ALT-PU-2016-1082
ALT-PU-2018-2498
CESA-2018_3327
CLEANSTART-2026-LA13761
CLEANSTART-2026-NJ87139
CLEANSTART-2026-OL50443
CLEANSTART-2026-TC95380
CLEANSTART-2026-WX01708
DLA-1460-1
DSA-4260-1
MGASA-2018-0455
OPENSUSE-SU-2018_3315-1
OPENSUSE-SU-2018_3505-1
OPENSUSE-SU-2021:1200-1
OPENSUSE-SU-2021_1200-1
OPENSUSE-SU-2021:2802-1
OPENSUSE-SU-2021_2802-1
OPENSUSE-SU-2024:10958-1
RHSA-2018:3327
RHSA-2018_3327
SUSE-SU-2018:3250-1
SUSE-SU-2018:3436-1
SUSE-SU-2018:3436-2
SUSE-SU-2018:3441-1
SUSE-SU-2021:2765-1
SUSE-SU-2021:2802-1
USN-3728-1
USN-3728-2
USN-3728-3
USN-3789-2
USN-7788-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com