CVE-2018-18585

Name of the Vulnerable Software and Affected Versions libmspack versions prior to 0.8alpha

Description The issue arises from the chmd read headers function in mspack/chmd.c, which improperly handles filenames starting with '0' as their first or second character. This could potentially lead to unintended behavior when processing such filenames.

Recommendations For versions prior to 0.8alpha, update to version 0.8alpha or later to resolve the issue.