CVE-2018-12085

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-120867.5Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.CVE-2018-120875.3Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over CVE-2018-120887.5S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present o CVE-2018-120897.5In Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password for a Service Fabric Cluster, when the Serv CVE-2018-120906.1There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaSc CVE-2018-120929.8tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.CVE-2018-120937.5tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.CVE-2018-120945.4Cross-site scripting (XSS) vulnerability in news.php in Dimofinf CMS Version 3.0.0 allows remote attackers to inject arbitrary web script or CVE-2018-120955.4A Reflected Cross-Site Scripting web vulnerability has been discovered in the OEcms v3.1 web-application. The vulnerability is located in th CVE-2018-120965.5The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause a CVE-2018-120975.5The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to CVE-2018-120985.5The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disc