LiveActive security incident?Get immediate response
CVE Record

CVE-2018-8050: The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote at...

The af_get_page() function in lib/afflib_pages.cpp in AFFLIB (aka AFFLIBv3) through 3.7.16 allows remote attackers to cause a denial of service (segmentation fault) via a corrupt AFF image that triggers an unexpected pagesize value.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

AFFLIB can crash when it processes a malformed AFF forensic image. The known impact is denial of service, not data theft or remote code execution. Business risk is mainly disruption to forensic, incident response, or evidence-processing workflows that accept AFF files from untrusted or external sources.

Executive priority

Treat this as a targeted operational resilience issue. Prioritize if AFF images enter investigative workflows from outside the organization or from adversary-controlled systems. It is not currently supported as an emergency internet-wide exposure from the supplied evidence.

Technical view

CVE-2018-8050 affects af_get_page() in lib/afflib_pages.cpp in AFFLIB/AFFLIBv3 through 3.7.16. A corrupt AFF image can trigger an unexpected pagesize value and segmentation fault. The provided sources identify a GitHub commit reference but do not provide CVSS, CWE, broad downstream product mapping, or exploitation evidence.

Likely exposure

Likely exposed systems are forensic workstations, evidence-processing pipelines, malware-analysis labs, or services that parse AFF disk images using AFFLIBv3 through 3.7.16. Exposure is unclear for packaged downstream tools unless they bundle or dynamically link the affected AFFLIB code.

Exploitation context

The CVE describes remote attackers causing denial of service through a corrupt AFF image, implying file-processing exposure. CISA KEV status is false in the source bundle, and no cited source states active exploitation. Evidence does not support claims of code execution or privilege escalation.

Researcher notes

The public bundle is sparse: no CVSS, CWE, vendor advisory, fixed release, or downstream product list is provided. Analysis should focus on AFFLIBv3 through 3.7.16 and the referenced code commit. Avoid assuming exploitation, broader product impact, or a specific patched version without vendor confirmation.

Mitigation direction

  • Inventory AFFLIB or AFFLIBv3 usage across forensic and evidence-processing systems.
  • Check whether deployed builds include the referenced upstream fix commit.
  • Update AFFLIB from trusted vendor or upstream guidance when a fixed package is available.
  • Restrict processing of untrusted AFF images to isolated analysis environments.
  • Preserve crash telemetry and sample provenance for incident review.

Validation and detection

  • Confirm installed AFFLIB package versions and linked library versions.
  • Review SBOMs and forensic tool dependencies for bundled AFFLIBv3 code.
  • Verify whether commit 435a2ca802358a3debb6d164d2c33049131df81c is present.
  • Run parser regression checks only with controlled, non-production test images.
  • Monitor processing services for segmentation faults when handling AFF images.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2018-8050 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.