Security readout for executives and security teams
Plain-English summary
CVE-2018-11364 describes a memory leak in ReadStat 0.1.1, a library used to read statistical data files. Affected software may gradually consume memory when processing relevant SPSS/SAV input. The bundle does not provide severity scoring, confirmed exploitation, or a vendor fix.
Executive priority
Prioritize as a dependency hygiene and resilience issue, not an emergency, unless business-critical systems process untrusted SAV files at scale. Evidence is incomplete, so first confirm exposure.
Technical view
The reported flaw is in sav_parse_machine_integer_info_record in spss/readstat_sav_read.c within libreadstat.a. The issue is tied to an iconv_open call and is described as a memory leak. No CVSS vector, CWE, CPE, patch version, or exploitation evidence is included.
Likely exposure
Exposure is likely limited to applications or services that embed ReadStat 0.1.1 and parse SPSS/SAV files, especially from untrusted or repeated uploads. The source bundle does not identify downstream products or affected CPEs.
Exploitation context
The source bundle does not show active exploitation, and KEV is false. Practical impact appears resource-exhaustion oriented, but exploitability and operational impact are not proven by the provided sources.
Researcher notes
The record is sparse: no CVSS, CWE, affected CPEs, patch version, or detailed exploit conditions are provided. Analysis should stay close to the named function, version, and iconv_open memory-leak description.
Mitigation direction
- Inventory applications that include ReadStat 0.1.1 or libreadstat.a.
- Check the ReadStat project or vendor guidance for fixed versions.
- Restrict untrusted SPSS/SAV file ingestion where feasible.
- Monitor affected services for abnormal memory growth.
- Apply resource limits to file-processing workloads where appropriate.
Validation and detection
- Confirm whether ReadStat 0.1.1 is present in application dependencies.
- Identify workflows that parse SPSS/SAV files using ReadStat.
- Review file-processing services for memory growth during SAV ingestion.
- Check vendor advisories before declaring remediation complete.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-11364 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/ChijinZ/security_advisories/tree/master/ReadStat-7bced5bCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.