CVE-2018-14682

libmspack0: An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha

CVE-2018-14682 is fixed in libmspack0 on 1 platform by libmspack0 0.6-3ubuntu0.1 (version 0.6-3ubuntu0.1), released July 27, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0361
89th percentile

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the TOLOWER() macro for CHM decompression.

Where it's fixed

ProductFixed inFixReleased
Linux
libmspack0 · Ubuntu 18.04.6 LTS (bionic) 0.6-3ubuntu0.1 libmspack0 0.6-3ubuntu0.1 Jul 27, 2018