What’s Vulnerable › Vulnerabilities

CVE-2018-20428

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-24 · updated 2026-06-17
• Weakness: CWE-476

Description

libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.

Affected products

• Libming: 0.4.8

References

• https://github.com/libming/libming/issues/161
• https://github.com/libming/libming/issues/161

Get alerted when CVE-2018-20428 or the next vulnerability affects your stack