CVE-2018-20541

EUVD-2018-13095
There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
libxsmm_projectlibxsmm
1.10
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxsmm
bookworm
1.17-2
fixed
sid
1.17-4
fixed
trixie
1.17-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxsmm
bionic
dne
cosmic
ignored
disco
ignored
eoan
ignored
focal
dne
groovy
ignored
hirsute
dne
impish
dne
jammy
dne
trusty
dne
xenial
dne
Common Weakness Enumeration
References
https://bugzilla.redhat.com/show_bug.cgi?id=1652632
https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
https://github.com/hfp/libxsmm/issues/287
https://bugzilla.redhat.com/show_bug.cgi?id=1652632
https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
https://github.com/hfp/libxsmm/issues/287