VULNERABILITY INTELLIGENCE

CVE-2018-4012

CVSS score9.3 HIGH

EPSS probability2.55%

CISA KEVNot currently listed

Published2019-01-03

Last modified2026-06-17

Description

An exploitable buffer overflow vulnerability exists in the HTTP header-parsing function of the Webroot BrightCloud SDK. The function bc_http_read_header incorrectly handles overlong headers, leading to arbitrary code execution. An unauthenticated attacker could impersonate a remote BrightCloud serve... .