An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames.
{ "vanir_signatures": [ { "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "49925043302351673514388068494701907030", "161712808870032329900961784810405018411", "121485490807141736114950494978058559156", "7489023390805984363603892804880154015", "202644202232952523655974633013653707746", "138619896882174347564468407303695257759", "15990234950511709168994928365836356022", "256898133550272973989357990071546787788", "312328057604315597105613547714626917165", "333854538769822575592451592026482133150", "311166430157540248862665973352097654759", "219884059926347081211079070659462285352", "147707688935502192171362132058820901553", "165585480514541969929312430367339872957" ] }, "id": "CVE-2018-14680-4ca3b7ad", "deprecated": false, "target": { "file": "libmspack/mspack/chmd.c" }, "signature_type": "Line", "source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a" }, { "signature_version": "v1", "digest": { "length": 6599.0, "function_hash": "107258753819447024680002702952495521063" }, "id": "CVE-2018-14680-7d4dd999", "deprecated": false, "target": { "file": "libmspack/mspack/chmd.c", "function": "chmd_read_headers" }, "signature_type": "Function", "source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a" }, { "signature_version": "v1", "digest": { "length": 1351.0, "function_hash": "190023709558236809867088071942484683680" }, "id": "CVE-2018-14680-c6a42638", "deprecated": false, "target": { "file": "libmspack/mspack/chmd.c", "function": "read_chunk" }, "signature_type": "Function", "source": "https://github.com/kyz/libmspack/commit/72e70a921f0f07fee748aec2274b30784e1d312a" } ] }