Vulnerability Discovery in Open Source Libraries: Analyzing CVE-2020-11863

This McAfee Labs blog provides a deep-dive analysis of libEMF vulnerabilities (notably CVE-2020-11863 and CVE-2020-11865), showing how an out-of-bounds access to a global stock-object vector during EMR_SELECTOBJECT processing combined with uninitialized memory (ASAN fill 0xBE) leads to dereferencing a bogus vtable and a crash; the post explains reproduction steps, ASAN behavior, and notes that fixes have been released, while recommending fuzzing and stronger collaboration with open-source maintainers.