What’s Vulnerable › Vulnerabilities

CVE-2018-18058

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-24 · updated 2026-06-17
• Weakness: CWE-369

Description

An issue was discovered in Bitdefender Engines before 7.76662. A vulnerability has been discovered in the iso.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a division-by-zero circumstance. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

• Bitdefender Scan Engines: before 7.76662 — fixed in 7.76662

How to fix

Upgrade to a fixed version: Bitdefender Scan Engines 7.76662. Check the vendor advisory for mitigations.

References

• https://www.bitdefender.com/
• https://www.bitdefender.com/support/security-advisories/bitdefender-iso-xmd-iso-parsing-bounds-read-vulnerability/
• https://www.bitdefender.com/
• https://www.bitdefender.com/support/security-advisories/bitdefender-iso-xmd-iso-parsing-bounds-read-vulnerability/

Get alerted when CVE-2018-18058 or the next vulnerability affects your stack