[CVE-2018-10393] heap buffer overflow