CVE-2018-20430

GNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function history_extract() in plugins/ole2_extractor.c, related to EXTRACTOR_common_convert_to_utf8 in common/convert.c.

• CWE-125

• http://www.securityfocus.com/bid/106300Third Party Advisory, VDB Entry
• https://gnunet.org/bugs/view.php?id=5493Exploit, Issue Tracking, Third Party Advisory
• https://gnunet.org/git/libextractor.git/commit/?id=b405d707b36e0654900cba78e89f49779efea110Patch, Third Party Advisory
• https://gnunet.org/git/libextractor.git/tree/ChangeLogRelease Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00015.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2018/dsa-4361Third Party Advisory
• http://www.securityfocus.com/bid/106300Third Party Advisory, VDB Entry
• https://gnunet.org/bugs/view.php?id=5493Exploit, Issue Tracking, Third Party Advisory
• https://gnunet.org/git/libextractor.git/commit/?id=b405d707b36e0654900cba78e89f49779efea110Patch, Third Party Advisory
• https://gnunet.org/git/libextractor.git/tree/ChangeLogRelease Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/12/msg00015.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2018/dsa-4361Third Party Advisory

Published

Dec 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20425libming 0.4.8 has a NULL pointer dereference in the pushdup …
• CVE-2018-20426libming 0.4.8 has a NULL pointer dereference in the newVar3 …
• CVE-2018-20427libming 0.4.8 has a NULL pointer dereference in the getInt f…
• CVE-2018-20428libming 0.4.8 has a NULL pointer dereference in the strlenex…
• CVE-2018-20429libming 0.4.8 has a NULL pointer dereference in the getName …
• CVE-2018-2043Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20431GNU Libextractor through 1.8 has a NULL Pointer Dereference …
• CVE-2018-20432D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use…9.8
• CVE-2018-20433c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream i…
• CVE-2018-20434LibreNMS 1.46 allows remote attackers to execute arbitrary O…
• CVE-2018-20436The "secret chat" feature in Telegram 4.9.1 for Android has …
• CVE-2018-20437An issue was discovered in the fileDownload function in the …7.5