CVE-2018-11095

The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

• CWE-119

• https://docs.google.com/document/d/13xJhiIgDbqYwmR4j7aGEbKUU8KDl195mkw4rcvhT4J8/edit?usp=sharingThird Party Advisory
• https://github.com/libming/libming/issues/141Third Party Advisory
• https://docs.google.com/document/d/13xJhiIgDbqYwmR4j7aGEbKUU8KDl195mkw4rcvhT4J8/edit?usp=sharingThird Party Advisory
• https://github.com/libming/libming/issues/141Third Party Advisory

Published

May 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1109A vulnerability was found in Braces versions 2.2.0 and above…5.3
• CVE-2018-11090An XSS issue was discovered in MyBiz MyProcureNet 5.0.0. Thi…
• CVE-2018-11091An issue was discovered in MyBiz MyProcureNet 5.0.0. A malic…9.9
• CVE-2018-11092An issue was discovered in the Admin Notes plugin 1.1 for My…
• CVE-2018-11093Cross-site scripting (XSS) vulnerability in the Link package…6.1
• CVE-2018-11094An issue was discovered on Intelbras NCLOUD 300 1.0 devices.…
• CVE-2018-11096Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vuln…
• CVE-2018-11097An issue was discovered in cloudwu/cstring through 2016-11-0…
• CVE-2018-11098An issue was discovered in Frog CMS 0.9.5. There is a file u…
• CVE-2018-11099The header::add_INFO_descriptor function in header.cpp in VC…
• CVE-2018-1110A flaw was found in knot-resolver before version 2.3.0. Malf…7.5
• CVE-2018-11100The decompileSETTARGET function in decompile.c in libming th…