CVE-2018-18059

An issue was discovered in Bitdefender Engines before 7.76675. A vulnerability has been discovered in the rar.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. Paired with other vulnerabilities, this can result in denial-of-service. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• CWE-125

• https://www.bitdefender.com/Vendor Advisory
• https://www.bitdefender.com/support/security-advisories/bitdefender-rar-xmd-rar-parsing-bounds-read-vulnerability/Vendor Advisory
• https://www.bitdefender.com/Vendor Advisory
• https://www.bitdefender.com/support/security-advisories/bitdefender-rar-xmd-rar-parsing-bounds-read-vulnerability/Vendor Advisory

Published

May 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1803IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…6.1
• CVE-2018-18035A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 P…
• CVE-2018-1804IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…3.7
• CVE-2018-1805IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…4.3
• CVE-2018-18056An issue was discovered in the Texas Instruments (TI) TM4C, …
• CVE-2018-18058An issue was discovered in Bitdefender Engines before 7.7666…
• CVE-2018-18060An issue was discovered in Bitdefender Engines before 7.7680…
• CVE-2018-18061An issue was discovered in dialog.php in tecrail Responsive …
• CVE-2018-18062An issue was discovered in dialog.php in tecrail Responsive …
• CVE-2018-18064cairo through 1.15.14 has an out-of-bounds stack-memory writ…6.5
• CVE-2018-18065_set_key in agent/helpers/table_container.c in Net-SNMP befo…
• CVE-2018-18066snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.…7.5