CVE-2018-20541

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-20541
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20541.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-20541
Downstream
Published
2018-12-28T16:29:04.643Z
Modified
2025-11-14T03:33:29.156763Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

There is a heap-based buffer overflow in libxsmmsparsecscreader at generatorspgemmcscreader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses).

References

Affected packages

Git / github.com/hfp/libxsmm

Affected ranges

Type
GIT
Repo
https://github.com/hfp/libxsmm
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
151481489192e6d1997f8bde52c5c425ea41741d

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2899.0,
            "function_hash": "253237323125577349990588301710073922474"
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-42082ee1",
        "target": {
            "function": "libxsmm_sparse_csr_reader",
            "file": "src/generator_spgemm_csr_reader.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2305.0,
            "function_hash": "257932478644569493591294152135594238066"
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-44059b59",
        "target": {
            "function": "edge_sparse_csr_reader_double",
            "file": "samples/edge/edge_proxy_common.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "241923795223860916277411171048424946468",
                "209110177833169472757848964198364002047",
                "226469009479139064176779870339992460152",
                "192626307265761018682685695128013722668",
                "261546154635701793906232853738646677101",
                "18508411805474619725990427461893891957",
                "51501535861073324594083067657348697914",
                "110807367558379506002077375399143442439",
                "257165498594075926253907697244042964172"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-5066215b",
        "target": {
            "file": "src/generator_spgemm_csr_reader.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "241923795223860916277411171048424946468",
                "209110177833169472757848964198364002047",
                "54720283948260693235784795782894161382",
                "159871792082033176477973504123091930777"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-914a6527",
        "target": {
            "file": "samples/edge/edge_proxy_common.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "241923795223860916277411171048424946468",
                "209110177833169472757848964198364002047",
                "54720283948260693235784795782894161382",
                "217042301667030676819970089241851533120"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-956a0ae8",
        "target": {
            "file": "samples/pyfr/pyfr_driver_asp_reg.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "241923795223860916277411171048424946468",
                "107558474951648408386904201689056226698",
                "283203830907550038709210239009337494119",
                "18022234622339816638805531357357536949",
                "291840242035544412416174133096187863902",
                "18508411805474619725990427461893891957",
                "4969517896670101590188015537595354571",
                "291749407274234609554627974998776176771",
                "205777411820530140292049990175321492587",
                "206743855182286230386096444765258334159"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-a58f01b5",
        "target": {
            "file": "src/generator_spgemm_csc_reader.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2899.0,
            "function_hash": "117423682803360476822542486759614065109"
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-d0044958",
        "target": {
            "function": "libxsmm_sparse_csc_reader",
            "file": "src/generator_spgemm_csc_reader.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2342.0,
            "function_hash": "252726746632772907463537910857054546701"
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-ee91e15d",
        "target": {
            "function": "my_csr_reader",
            "file": "samples/pyfr/pyfr_driver_asp_reg.c"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "digest": {
            "length": 2495.0,
            "function_hash": "288578049635566099234369255849468353491"
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-f3f56076",
        "target": {
            "function": "libxsmm_sparse_csr_reader",
            "file": "samples/edge/common_edge_proxy.h"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "241923795223860916277411171048424946468",
                "209110177833169472757848964198364002047",
                "54720283948260693235784795782894161382",
                "217042301667030676819970089241851533120"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2018-20541-ffa602e8",
        "target": {
            "file": "samples/edge/common_edge_proxy.h"
        },
        "source": "https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d"
    }
]