cve/2018/CVE-2018-20542.md

CVE-2018-20542

Description

There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address).

POC

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1652633
• https://bugzilla.redhat.com/show_bug.cgi?id=1652633
• https://bugzilla.redhat.com/show_bug.cgi?id=1652635
• https://bugzilla.redhat.com/show_bug.cgi?id=1652635

Github

No PoCs found on GitHub currently.