CVE-2018-14565: Thunlp Thulac

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.

Affected products

• Thunlp Thulac: up to and including 2018-02-25

Published 2018-07-23. Last modified 2026-06-17.