Launchpad.net

CVE 2018-20431

GNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function process_metadata() in plugins/ole2_extractor.c.

See the CVE page on Mitre.org for more details.