What’s Vulnerable › Vulnerabilities

CVE-2018-18059

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-24 · updated 2026-06-17
• Weakness: CWE-125

Description

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

• Bitdefender Scan Engines: before 7.76675 — fixed in 7.76675

How to fix

Upgrade to a fixed version: Bitdefender Scan Engines 7.76675. Check the vendor advisory for mitigations.

References

• https://www.bitdefender.com/
• https://www.bitdefender.com/support/security-advisories/bitdefender-rar-xmd-rar-parsing-bounds-read-vulnerability/
• https://www.bitdefender.com/
• https://www.bitdefender.com/support/security-advisories/bitdefender-rar-xmd-rar-parsing-bounds-read-vulnerability/

Get alerted when CVE-2018-18059 or the next vulnerability affects your stack