CVE-2018-14794: Buffer Overflow
Published Oct 1, 2018
·Updated
Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer.
Affected Software
2 affected components
Fujielectric Alpha5 Smart Loader Firmware<=3.7
Fujielectric Alpha5 Smart Loader
Event History
Oct 1, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-14794?
The severity of CVE-2018-14794 is critical.
2
Which versions of Fuji Electric Alpha5 Smart Loader are affected by CVE-2018-14794?
Fuji Electric Alpha5 Smart Loader versions 3.7 and prior are affected by CVE-2018-14794.
3
What is the vulnerability description for CVE-2018-14794?
CVE-2018-14794 allows an attacker to overflow a heap-based buffer by copying the entire contents of a project file without performing a length/size check.
4
Are versions of Fuji Electric Alpha5 Smart Loader after 3.7 affected by CVE-2018-14794?
No, versions of Fuji Electric Alpha5 Smart Loader after 3.7 are not affected by CVE-2018-14794.
5
Is there a patch available for CVE-2018-14794?
No specific patch information is available for CVE-2018-14794. Please refer to the vendor's advisory or contact Fuji Electric for more information.