The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:afflib_project:afflib:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"range": [
{
"last_affected": "3.7.16"
}
],
"source": "CPE_RANGE"
}
],
"vendor_product": "afflib_project:afflib"
}
]
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:afflib_project:afflib:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "3.7.16"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "435a2ca802358a3debb6d164d2c33049131df81c"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8050.json"
[
{
"deprecated": false,
"digest": {
"function_hash": "97577065404003686757067143204020732506",
"length": 3756
},
"id": "CVE-2018-8050-378bfd24",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/sshock/afflibv3/commit/435a2ca802358a3debb6d164d2c33049131df81c",
"target": {
"file": "lib/afflib_pages.cpp",
"function": "af_get_page"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"272964851105127642200058026143803066100",
"106991726861691507362717612320841901943",
"84290451292210324762881947554174703910"
],
"threshold": 0.9
},
"id": "CVE-2018-8050-e4f4a524",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/sshock/afflibv3/commit/435a2ca802358a3debb6d164d2c33049131df81c",
"target": {
"file": "lib/afflib_pages.cpp"
}
}
]
"2026-10-24T14:03:33Z"