CVE-2018-14563

CRITICAL 9.8CVE-2018-14563 · Published 23/07/2018 · updated 17/06/2026

In short

CVE-2018-14563 is a CRITICAL (CVSS 9.8) vulnerability affecting thulac (thunlp).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
thulac thunlp	`≤ 2018-02-25`	No fix yet

Description

An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb_tagging_learner.h, possibly leading to memory corruption.

References

thunlp/THULAC · Exploit

More vulnerabilities in thulac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free