CVE-2018-20545

There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data.

• CWE-190

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1652621Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/cacalabs/libcaca/commit/3e52dabe3e64dc50f4422effe364a1457a8a8592Patch, Third Party Advisory
• https://github.com/cacalabs/libcaca/issues/37Exploit, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
• https://usn.ubuntu.com/3860-1/Third Party Advisory
• https://usn.ubuntu.com/3860-2/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1652621Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/cacalabs/libcaca/commit/3e52dabe3e64dc50f4422effe364a1457a8a8592Patch, Third Party Advisory
• https://github.com/cacalabs/libcaca/issues/37Exploit, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
• https://usn.ubuntu.com/3860-1/Third Party Advisory
• https://usn.ubuntu.com/3860-2/Third Party Advisory

Published

Dec 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2054Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20540There is memory leak at liblas::Open (liblas/liblas.hpp) in …
• CVE-2018-20541There is a heap-based buffer overflow in libxsmm_sparse_csc_…
• CVE-2018-20542There is a heap-based buffer-overflow at generator_spgemm_cs…
• CVE-2018-20543There is an attempted excessive memory allocation at libxsmm…
• CVE-2018-20544There is floating point exception at caca/dither.c (function…
• CVE-2018-20546There is an illegal READ memory access at caca/dither.c (fun…8.1
• CVE-2018-20547There is an illegal READ memory access at caca/dither.c (fun…8.1
• CVE-2018-20548There is an illegal WRITE memory access at common-image.c (f…8.8
• CVE-2018-20549There is an illegal WRITE memory access at caca/file.c (func…8.8
• CVE-2018-2055Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20551A reachable Object::getString assertion in Poppler 0.72.0 al…