{"id":"CVE-2019-18218","aliases":["ALPINE-CVE-2019-18218","ALSA-2021:4374","BELL-CVE-2019-18218","CLSA-2026-1776693102","CLSA-2026-1777683788","DEBIAN-CVE-2019-18218","DLA-1969-1","DLA-2708-1","DSA-4550-1","EUVD-2019-8018","GHSA-gg3j-j3hx-hjx5","MGASA-2019-0308","RHSA-2021:4374","RLSA-2021:4374","SUSE-SU-2020:1294-1","SUSE-SU-2021:2930-1","UBUNTU-CVE-2019-18218","USN-4172-1","USN-4172-2","openSUSE-SU-2020:0677-1","openSUSE-SU-2024:10755-1"],"status":"published","title":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0185,"percentile":0.79256,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2019-10-21T04:41:56Z","modified":"2026-10-29T11:01:27Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"file","fixed_in":["5.37-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"file","fixed_in":["5.32-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"file","fixed_in":["5.32-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"file","fixed_in":["5.36-r1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"file","fixed_in":["5.33-20.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"file-devel","fixed_in":["5.33-20.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"file-libs","fixed_in":["5.33-20.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-magic","fixed_in":["5.33-20.el8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"file","fixed_in":["5.04-30.0.1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"file-devel","fixed_in":["5.04-30.0.1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"file-libs","fixed_in":["5.04-30.0.1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"file-static","fixed_in":["5.04-30.0.1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"python-magic","fixed_in":["5.04-30.0.1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"file","fixed_in":["5.04-30.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"file-devel","fixed_in":["5.04-30.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"file-libs","fixed_in":["5.04-30.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"file-static","fixed_in":["5.04-30.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"python-magic","fixed_in":["5.04-30.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"file","fixed_in":["1:5.37-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"file","fixed_in":["1:5.37-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"file","fixed_in":["1:5.37-6"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"file","fixed_in":["1:5.22+15-2+deb8u6"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"file","fixed_in":["1:5.30-1+deb9u3"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"file","fixed_in":["1:5.35-4+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"file","fixed_in":["5.37-1.2.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-debuginfo","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-debugsource","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-libs","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-libs-debuginfo","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-magic","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-debuginfo","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-debugsource","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-devel","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-libs-debuginfo","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"file","fixed_in":["0:5.33-20.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"file","fixed_in":["5.32-7.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"python-magic","fixed_in":["5.32-7.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-magic","fixed_in":["5.32-7.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python-magic","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"file","fixed_in":["5.22-10.21.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"file","fixed_in":["1:5.14-2ubuntu3.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"file","fixed_in":["1:5.25-2ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"file","fixed_in":["1:5.32-2ubuntu0.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"file","fixed_in":["5.32-lp151.8.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"python-magic","fixed_in":["5.32-lp151.8.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.36-r1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.33-20.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"file-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.33-20.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"file-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.33-20.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.33-20.el8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.0.1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"file-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.0.1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"file-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.0.1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"file-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.0.1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.0.1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"file-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"file-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"file-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.04-30.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.37-6"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.22+15-2+deb8u6"}]}],"versions":["1:5.22+15-2","1:5.22+15-2+deb8u1","1:5.22+15-2+deb8u2","1:5.22+15-2+deb8u3","1:5.22+15-2+deb8u4","1:5.22+15-2+deb8u5"]},{"source":"osv","ecosystem":"Debian:9","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.33-0+deb9u11"}]}],"versions":["7.0.19-1","7.0.20-1","7.0.20-2","7.0.22-1","7.0.22-2","7.0.22-3","7.0.25-1","7.0.26-1","7.0.27-0+deb9u1","7.0.27-1","7.0.28-1","7.0.29-1","7.0.30-0+deb9u1","7.0.30-1","7.0.30-2","7.0.31-1","7.0.32-1","7.0.33-0+deb9u1","7.0.33-0+deb9u10","7.0.33-0+deb9u2","7.0.33-0+deb9u3","7.0.33-0+deb9u5","7.0.33-0+deb9u6","7.0.33-0+deb9u7","7.0.33-0+deb9u8","7.0.33-0+deb9u9"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.30-1+deb9u3"}]}],"versions":["1:5.30-1","1:5.30-1+deb9u1","1:5.30-1+deb9u2"]},{"source":"osv","ecosystem":"Debian:10","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.35-4+deb10u1"}]}],"versions":["1:5.35-4"]},{"source":"osv","ecosystem":"Mageia:7","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.37-1.2.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"file-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"file-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.33-20.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-7.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-7.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-7.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22-10.21.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.14-2ubuntu3.4+esm1"}]}],"versions":["5.11-2ubuntu4","1:5.14-2ubuntu1","1:5.14-2ubuntu2","1:5.14-2ubuntu3","1:5.14-2ubuntu3.1","1:5.14-2ubuntu3.2","1:5.14-2ubuntu3.3","1:5.14-2ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.25-2ubuntu1.3"}]}],"versions":["1:5.22+15-2ubuntu1","1:5.25-2ubuntu1","1:5.25-2ubuntu1.1","1:5.25-2ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.32-2ubuntu0.3"}]}],"versions":["1:5.32-1","1:5.32-2","1:5.32-2ubuntu0.1","1:5.32-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.25-2ubuntu1.3"}]}],"versions":["1:5.22+15-2ubuntu1","1:5.25-2ubuntu1","1:5.25-2ubuntu1.1","1:5.25-2ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.32-2ubuntu0.3"}]}],"versions":["1:5.32-1","1:5.32-2","1:5.32-2ubuntu0.1","1:5.32-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.14-2ubuntu3.4+esm1"}]}],"versions":["5.11-2ubuntu4","1:5.14-2ubuntu1","1:5.14-2ubuntu2","1:5.14-2ubuntu3","1:5.14-2ubuntu3.1","1:5.14-2ubuntu3.2","1:5.14-2ubuntu3.3","1:5.14-2ubuntu3.4"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-lp151.8.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"python-magic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32-lp151.8.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.40-1.14"}]}],"bundled":7}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"file_project","product":"file"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/file/file/commit/46a8443f76cec4b41ec736eca396984c74664f84","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16780","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00032.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4550","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/4172-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4172-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VBK6XOJR6OVWT2FUEBO7V7KCOSSLAP52/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV6PFCEYHYALMTT45QE2U5C5TEJZQPXJ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D6BJVGXSCC6NMIAWX36FPWHEIFON3OSE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20200115-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00044.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18218","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CV6PFCEYHYALMTT45QE2U5C5TEJZQPXJ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6BJVGXSCC6NMIAWX36FPWHEIFON3OSE/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VBK6XOJR6OVWT2FUEBO7V7KCOSSLAP52/"},{"url":"https://github.com/advisories/GHSA-gg3j-j3hx-hjx5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-18218","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4374.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-18218","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-18218","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1776693102.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777683788.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18218","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0308.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25615","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4374","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765272","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4374.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18218","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18218","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4374","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1154661","tags":["report"]},{"url":"https://bugzilla.suse.com/1169512","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18218","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212930-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-18218","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4172-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4172-2","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KNKLNIB4ZMHA6GDNDLMUTNQRB6PVMFHG/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8907","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T04:41:56Z","modified":"2024-08-05T01:47:13.995Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-8018","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T04:41:56Z","modified":"2024-08-05T01:47:13Z","updated_at":"2026-11-03T02:40:28.860423Z"}],"ghsa":[{"id":"GHSA-gg3j-j3hx-hjx5","title":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR...","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2022-05-24T16:59:33Z","modified":"2023-01-30T05:06:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:47:33.281523Z"}],"nvd":[{"id":"CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T05:15:10.52Z","modified":"2026-06-17T02:24:36.187Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"ALPINE-CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T05:15:10.52Z","modified":"2026-09-21T06:17:52.501531943Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2019-18218","title":"CVE-2019-18218 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:23.687125Z","modified":"2026-01-26T09:47:43.982922Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T05:15:10.52Z","modified":"2026-10-20T13:40:38.1945088Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T05:15:10.52Z","modified":"2026-09-21T07:02:31.003239789Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2021:4374","title":"Red Hat Security Advisory: file security update","status":"published","published":"2024-09-16T05:40:17Z","modified":"2026-06-26T12:21:16.174477649Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4374","title":"Moderate: file security update","description":"The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.\n\nSecurity Fix(es):\n\n* file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:13:30Z","modified":"2026-02-04T07:40:23.174269Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-18218","description":"cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).","status":"published","published":"2019-10-21T05:15:00Z","modified":"2026-04-22T12:13:51.624229Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2021:4374","title":"Moderate: file security update","description":"The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.\n\nSecurity Fix(es):\n\n* file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:13:30Z","modified":"2026-10-29T11:01:27.444087951Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1776693102","title":"file: Fix of CVE-2019-18218","description":"- CVE-2019-18218: fix heap-based buffer overflow in cdf_read_property_info","status":"published","published":"2026-04-20T13:51:46Z","modified":"2026-06-01T00:32:20.292000584Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1777683788","title":"file: Fix of CVE-2019-18218","description":"- CVE-2019-18218: fix heap-based buffer overflow in cdf_read_property_info","status":"published","published":"2026-05-02T01:03:15Z","modified":"2026-06-01T00:33:16.806087676Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-1969-1","title":"file - security update","status":"published","published":"2019-10-23T00:00:00Z","modified":"2026-03-09T01:21:15.610375Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2708-1","title":"php7.0 - security update","status":"published","published":"2021-07-15T00:00:00Z","modified":"2026-03-09T01:19:08.392552Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4550-1","title":"file - security update","status":"published","published":"2019-10-25T00:00:00Z","modified":"2026-03-09T02:09:29.11581Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2019-0308","title":"Updated file packages fix security vulnerability","description":"Updated file packages fix security vulnerability:\n\nA buffer overflow was found in file which may result in denial of service \nor potentially the execution of arbitrary code if a malformed CDF\n(Composite Document File) file is processed (CVE-2019-18218).\n","status":"published","published":"2019-10-29T14:54:30Z","modified":"2026-04-16T04:41:25.172441965Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0677-1","title":"Security update for file","description":"This update for file fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).\n\nNon-security issue fixed:\n\n- Fixed broken '--help' output (bsc#1169512).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-05-22T16:16:29Z","modified":"2026-02-04T04:35:51.451931Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10755-1","title":"file-5.40-1.14 on GA media","description":"These are all security issues fixed in the file-5.40-1.14 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:44:55.810237Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:1294-1","title":"Security update for file","description":"This update for file fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).\n\nNon-security issue fixed:\n\n- Fixed broken '--help' output (bsc#1169512).\n","status":"published","published":"2020-05-18T05:38:52Z","modified":"2026-02-04T02:27:02.979998Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2021:2930-1","title":"Security update for file","description":"This update for file fixes the following issues:\n\n- CVE-2019-18218: Fixed heap-based buffer overflow in cdf_read_property_info in cdf.c (bsc#1154661).\n","status":"published","published":"2021-09-02T12:48:52Z","modified":"2026-02-04T04:29:32.726727Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-4172-1","title":"file vulnerability","description":"It was discovered that file incorrectly handled certain malformed files. An\nattacker could use this issue to cause a denial of service, or possibly\nexecute arbitrary code.\n","status":"published","published":"2019-10-30T13:49:35Z","modified":"2026-04-22T10:01:33.523787Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4172-2","title":"file vulnerability","description":"USN-4172-1 fixed a vulnerability in file. This update provides\nthe corresponding update for Ubuntu 12.04 ESM Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that file incorrectly handled certain malformed files. An\n attacker could use this issue to cause a denial of service, or possibly\n execute arbitrary code.\n","status":"published","published":"2019-10-31T16:33:01Z","modified":"2026-04-22T10:01:45.428558Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}