critical9.8
CVE-2018-11546
md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.
Impact
md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Md4c Project | Md4c | Version 0.2.5 |