CVE-2018-20998

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Aug 26, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-209997.5An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.CVE-2018-210009.8An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap m CVE-2018-210016.1The anycomment plugin before 0.0.33 for WordPress has XSS.CVE-2018-210028.8The js-support-ticket plugin before 2.0.6 for WordPress has CSRF.CVE-2018-210039.8The buddyforms plugin before 2.2.8 for WordPress has SQL injection.CVE-2018-210049.8The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.CVE-2018-210059.8The bbp-move-topics plugin before 1.1.6 for WordPress has code injection.CVE-2018-210068.8The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF.CVE-2018-210079.8The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.CVE-2018-210085.5An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file dr CVE-2018-210098.8Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.CVE-2018-210108.8OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c.