CVE-2018-11536

md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits.

Source: CVE-2018-11536