SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2018-13348

HIGH · CVSS 7.5 EPSS 2.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-06 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.

CVE
CVE-2018-13348
Severity
HIGH
CVSS
7.5
EPSS
2.09%

Original NVD Description

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

Related CVEs

Other vulnerabilities affecting the same vendor(s)