CVE-2018-12102

md4c 0.2.6 has a NULL pointer dereference in the function md_process_line in md4c.c, related to ctx->current_block.

• CWE-476

• https://github.com/Edward-L/fuzzing-pocs/tree/master/md4cIssue Tracking, Third Party Advisory
• https://github.com/mity/md4c/issues/41Issue Tracking, Third Party Advisory
• https://github.com/Edward-L/fuzzing-pocs/tree/master/md4cIssue Tracking, Third Party Advisory
• https://github.com/mity/md4c/issues/41Issue Tracking, Third Party Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12097The liblnk_location_information_read_data function in liblnk…
• CVE-2018-12098The liblnk_data_block_read function in liblnk_data_block.c i…
• CVE-2018-12099Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashbo…
• CVE-2018-1210Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-12100Sonatype Nexus Repository Manager versions 3.x before 3.12.0…
• CVE-2018-12101CMS Clipper 1.3.3 has XSS in the Security tab search, User G…
• CVE-2018-12103An issue was discovered on D-Link DIR-890L with firmware 1.2…
• CVE-2018-12104Cross-site scripting (XSS) vulnerability in Airbnb Knowledge…
• CVE-2018-12108An issue was discovered in Dropbox Lepton 1.2.1. The validat…
• CVE-2018-12109An issue was discovered in Free Lossless Image Format (FLIF)…
• CVE-2018-1211Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contai…
• CVE-2018-12110portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio…