Vulnerabilities > Md4C Project > Md4C > 0.2.6

DATE CVE VULNERABILITY TITLE RISK
2018-06-11 CVE-2018-12112 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Md4C Project Md4C 0.2.6
md_build_attribute in md4c.c in md4c 0.2.6 allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact via a crafted file.
local
low complexity
md4c-project CWE-119
7.8
7.8
2018-06-11 CVE-2018-12102 NULL Pointer Dereference vulnerability in Md4C Project Md4C 0.2.6
md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.
local
low complexity
md4c-project CWE-476
5.5
5.5