CVE-2018-16982
Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
CVE-2018-16982 is a medium vulnerability (CVSS 5.5) in Byvoid Open Chinese Convert, published September 13, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in opencc 1.1.2.
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
CVE-2018-16982- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
CVE-2018-16982- Updated
- 2026-11-02
EUVDEUVD-2018-0150 No score
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
EUVD-2018-0150- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9qh2-6fxg-9m4g
Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
GHSA-9qh2-6fxg-9m4g- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
CVE-2018-16982- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-9qh2-6fxg-9m4g
Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
GHSA-9qh2-6fxg-9m4g- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
Show 5 moreShow less
OSVPYSEC-2018-153
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
PYSEC-2018-153- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-16982
Open Chinese Convert (OpenCC) 1.0.5 allows attackers to cause a denial of service (segmentation fault) because BinaryDict::NewFromFile in BinaryDict.cpp may have out-of-bounds keyOffset and valueOffset values via a crafted .ocd file.
- Record
UBUNTU-CVE-2018-16982- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2018-0443 No score
Updated opencc packages fix security vulnerability
It was discovered that opencc contained an out of bounds pointer in BinaryDict.cpp which could lead to segment fault and a Denial of Service (CVE-2018-16982).
- Record
MGASA-2018-0443- Updated
- 2026-11-02
OSVSUSE-SU-2022:4288-1 No score
Security update for opencc
This update for opencc fixes the following issues:
- CVE-2018-16982: Fixed out-of-bounds keyOffset and valueOffset values in BinaryDict.cpp. (bsc#1108310)
- Record
SUSE-SU-2022:4288-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:2102-1 No score
Security update for opencc
This update for opencc fixes the following issues:
- CVE-2018-16982: Check offset bounds in BinaryDict::NewFromFile method. (bsc#1108310)
- Record
SUSE-SU-2024:2102-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openccnpm |
before 1.1.2 | 1.1.2 |
openccMageia:6 |
before 1.0.3-3.1.mga6 | 1.0.3-3.1.mga6 |
openccSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.0.3-5.3.1 | 1.0.3-5.3.1 |
openccSUSE:Linux Enterprise Server 12 SP5 |
before 1.0.3-5.3.1 | 1.0.3-5.3.1 |
openccSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.0.3-5.3.1 | 1.0.3-5.3.1 |
openccSUSE:Linux Enterprise Module for Desktop Applications 15 SP5 |
before 1.0.5-150000.5.3.1 | 1.0.5-150000.5.3.1 |
openccSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 |
before 1.0.5-150000.5.3.1 | 1.0.5-150000.5.3.1 |
openccopenSUSE:Leap 15.5 |
before 1.0.5-150000.5.3.1 | 1.0.5-150000.5.3.1 |
openccUbuntu:16.04:LTS |
All versions, plus listed versions 0.4.3-2build1 |
None known |
openccUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.0.4-51.0.4-5ubuntu0.1~esm1 |
None known |
openccUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.0.5-21.0.5+git20190530-11.0.5+git20190530-1build11.0.5+git20190530-1ubuntu0.1~esm1 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | affected, aliases, references | EUVD |
| 2026-11-02 | created | OSV |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/BYVoid/OpenCC/issues/303
nvd.nist.gov/vuln/detail/CVE-2018-16982
Show 12 moreShow less
advisories.mageia.org/MGASA-2018-0443.html
bugs.mageia.org/show_bug.cgi?id=23764
lists.fedoraproject.org/archives/list/[email protected]/thread/GDWZHBV4B3VZTM4ACXQMZKSLTIKFJUUO
suse.com/support/update/announcement/2022/suse-su-20224288-1
bugzilla.suse.com/1108310
ubuntu.com/security/CVE-2018-16982
cve.org/CVERecord?id=CVE-2018-16982