CVE-2018-7436

An issue was discovered in FreeXL before 1.0.5. There is a heap-based buffer over-read in a pointer dereference of the parse_SST function.

• CWE-125

• https://bugzilla.redhat.com/show_bug.cgi?id=1547883Exploit, Issue Tracking, Third Party Advisory
• https://groups.google.com/forum/#%21topic/spatialite-users/b-d9iB5TDPE
• https://lists.debian.org/debian-lts-announce/2018/03/msg00000.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-44
• https://www.debian.org/security/2018/dsa-4129Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1547883Exploit, Issue Tracking, Third Party Advisory
• https://groups.google.com/forum/#%21topic/spatialite-users/b-d9iB5TDPE
• https://lists.debian.org/debian-lts-announce/2018/03/msg00000.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-44
• https://www.debian.org/security/2018/dsa-4129Third Party Advisory

Published

Feb 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7429Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x befor…
• CVE-2018-7431Directory traversal vulnerability in the Splunk Django App i…
• CVE-2018-7432Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, …
• CVE-2018-7433The iThemes Security plugin before 6.9.1 for WordPress does …
• CVE-2018-7434zzcms 8.2 allows remote attackers to discover the full path …5.3
• CVE-2018-7435An issue was discovered in FreeXL before 1.0.5. There is a h…
• CVE-2018-7437An issue was discovered in FreeXL before 1.0.5. There is a h…
• CVE-2018-7438An issue was discovered in FreeXL before 1.0.5. There is a h…
• CVE-2018-7439An issue was discovered in FreeXL before 1.0.5. There is a h…
• CVE-2018-7440An issue was discovered in Leptonica through 1.75.3. The gpl…
• CVE-2018-7441Leptonica through 1.75.3 uses hardcoded /tmp pathnames, whic…
• CVE-2018-7442An issue was discovered in Leptonica through 1.75.3. The gpl…