CVE-2018-11100

The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

• CWE-119

• https://docs.google.com/document/d/1N-_obGIyAM5DGcrB7gHy89Oy68aDvxSMjrKaaM7KOFA/editThird Party Advisory
• https://github.com/libming/libming/issues/142Third Party Advisory
• https://docs.google.com/document/d/1N-_obGIyAM5DGcrB7gHy89Oy68aDvxSMjrKaaM7KOFA/editThird Party Advisory
• https://github.com/libming/libming/issues/142Third Party Advisory

Published

May 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11095The decompileJUMP function in decompile.c in libming through…
• CVE-2018-11096Horse Market Sell & Rent Portal Script 1.5.7 has a CSRF vuln…
• CVE-2018-11097An issue was discovered in cloudwu/cstring through 2016-11-0…
• CVE-2018-11098An issue was discovered in Frog CMS 0.9.5. There is a file u…
• CVE-2018-11099The header::add_INFO_descriptor function in header.cpp in VC…
• CVE-2018-1110A flaw was found in knot-resolver before version 2.3.0. Malf…7.5
• CVE-2018-11101Open Whisper Signal (aka Signal-Desktop) through 1.10.1 allo…
• CVE-2018-11102An issue was discovered in Libav 12.3. A read access violati…
• CVE-2018-11103Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-11105There is stored cross site scripting in the wp-live-chat-sup…
• CVE-2018-11106NETGEAR has released fixes for a pre-authentication command …9.8
• CVE-2018-1111DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28…7.5