CVE-2018-1000047

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-09 · updated 2026-06-17
Weakness: CWE-502

Description

NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result in remote code execution. This attack appear to be exploitable via Victim opens an untrusted file for optimization using Kodiak library.

Affected products

nasa Kodiak: 1.0

References

https://github.com/nasa/Kodiak/issues/5
https://github.com/nasa/Kodiak/issues/5

Get alerted when CVE-2018-1000047 or the next vulnerability affects your stack