CVE-2018-3858

CVE-2018-3858 is a high-severity heap overflow vulnerability affecting Canvas Draw version 4.0.0, specifically within its TIFF parsing functionality. An attacker can exploit this by crafting a malicious TIFF image, leading to an out-of-bounds write that allows for arbitrary data overwriting and potential arbitrary code execution. The vulnerability has a CVSS score of 7.8, indicating a high impact on confidentiality, integrity, and availability, requiring user interaction (e.g., opening the malicious file) but with low attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.