CVE-2018-10771

Stack-based buffer overflow in the get_key function in parse.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

• CWE-787

• https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2Exploit, Third Party Advisory
• https://github.com/leesavide/abcm2ps/issues/17Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00015.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6DUTXB4EC3TQHTTAAIBKJ54GJTF6Y7V/
• https://drive.google.com/open?id=1HE9cht7WJPauA66acyJrEywXX8R4Hg-2Exploit, Third Party Advisory
• https://github.com/leesavide/abcm2ps/issues/17Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/04/msg00015.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGDXW2I3MY3QH4PJXLJET5QZZXMXTNWO/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSTB65NYYCKU7O6RF5B6CYY5IA6CA66Y/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6DUTXB4EC3TQHTTAAIBKJ54GJTF6Y7V/

Published

May 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10763Multiple cross-site scripting (XSS) vulnerabilities in Synam…
• CVE-2018-10767There is a stack-based buffer over-read in calling GLib in t…
• CVE-2018-10768There is a NULL pointer dereference in the AnnotPath::getCoo…
• CVE-2018-10769The transferProxy and approveProxy functions of a smart cont…
• CVE-2018-1077Spacewalk 2.6 contains an API which has an XXE flaw allowing…
• CVE-2018-10770download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows re…
• CVE-2018-10772The tEXtToDataBuf function in pngimage.cpp in Exiv2 through …
• CVE-2018-10773NULL pointer deference in the addsn function in serialno.c i…
• CVE-2018-10774Read access violation in the isiin_keyword function in isiin…
• CVE-2018-10775NULL pointer dereference in the _fields_add function in fiel…
• CVE-2018-10776The getbits function in mpglibDBL/common.c in mp3gain throug…
• CVE-2018-10777Buffer overflow in the WriteMP3GainAPETag function in apetag…