CVE-2018-10887

HIGH Year: 2018
CVSS v3 Score
8.1
High
CVSS v2 Score
5.8
Medium
Weakness Type
CWE-194
View all →

Vulnerability Description

A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.

Related Vulnerabilities

CVE-2021-38434

HIGH
CVSS:7.8(High)

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could le...

CWE-1942021

CVE-2020-13544

HIGH
CVSS:8.8(High)

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document...

CWE-1942020

CVE-2022-32138

HIGH
CVSS:8.8(High)

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

CWE-1942022

CVE-2020-13544

HIGH
CVSS:8.8(High)

An exploitable sign extension vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document...

CWE-1942020

CVE-2022-32138

HIGH
CVSS:8.8(High)

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

CWE-1942022

CVE-2021-38434

HIGH
CVSS:7.8(High)

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could le...

CWE-1942021