CVE-2018-1000101

Mingw-w64 version 5.0.3 and earlier, 5.0.4, 6.0.0 and 7.0.0 contains an Improper Null Termination (CWE-170) vulnerability in mingw-w64-crt (libc)->(v)snprintf that can result in The bug may be used to corrupt subsequent string functions. This attack appear to be exploitable via Depending on the usage, worst case: network.

• https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2018/1000xxx/CVE-2018-1000101.json
• https://sourceforge.net/p/mingw-w64/bugs/709/
• https://sourceforge.net/p/mingw-w64/bugs/709/?limit=25#1d38/fefc/39aaThird Party Advisory
• https://sourceforge.net/p/mingw-w64/mingw-w64/ci/v5.x/tree/mingw-w64-crt/stdio/snprintf.c#l15Patch, Third Party Advisory
• https://sourceforge.net/p/mingw-w64/mingw-w64/ci/v5.x/tree/mingw-w64-crt/stdio/vsnprintf.c#l12Patch, Third Party Advisory
• https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2018/1000xxx/CVE-2018-1000101.json
• https://sourceforge.net/p/mingw-w64/bugs/709/
• https://sourceforge.net/p/mingw-w64/bugs/709/?limit=25#1d38/fefc/39aaThird Party Advisory
• https://sourceforge.net/p/mingw-w64/mingw-w64/ci/v5.x/tree/mingw-w64-crt/stdio/snprintf.c#l15Patch, Third Party Advisory
• https://sourceforge.net/p/mingw-w64/mingw-w64/ci/v5.x/tree/mingw-w64-crt/stdio/vsnprintf.c#l12Patch, Third Party Advisory

Published

Mar 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000096brianleroux tiny-json-http version all versions since commit…
• CVE-2018-1000097Sharutils sharutils (unshar command) version 4.15.2 contains…
• CVE-2018-1000098Teluu PJSIP version 2.7.1 and earlier contains a Integer Ove…
• CVE-2018-1000099Teluu PJSIP version 2.7.1 and earlier contains a Access of N…
• CVE-2018-10001The decode_init function in libavcodec/utvideodec.c in FFmpe…
• CVE-2018-1000100GPAC MP4Box version 0.7.1 and earlier contains a Buffer Over…
• CVE-2018-1000102Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-1000103Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-1000104A plaintext storage of a password vulnerability exists in Je…
• CVE-2018-1000105An improper authorization vulnerability exists in Jenkins Ge…
• CVE-2018-1000106An improper authorization vulnerability exists in Jenkins Ge…
• CVE-2018-1000107An improper authorization vulnerability exists in Jenkins Jo…