CVE-2022-35018 advancecomp: SEGV via invalid read memory access
Brought to you by:
amadvance
Advancecomp v2.3 was discovered to contain a segmentation fault.
https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35018.md
https://drive.google.com/file/d/1ChqmPdrjId87582a-o5ogWyEI8goRVWJ/view?usp=sharing
This was reported downstream in Fedora Linux and Fedora EPEL, where I’m the current maintainer of the advancecomp package.
Fixed in github with the commit "Check move chunk"
Thank you for the quick investigation and fix.