CVE-2018-11547

CVE-2018-11547 is a critical heap-based buffer over-read vulnerability affecting md4c_project md4c version 0.2.5. This flaw, stemming from improper loop termination in the md_is_link_reference_definition_helper function, allows for remote code execution. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest from threat actors.