Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-111132

GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element

GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gnome
Products
Libgxps
CVE-2017-11590

libgxps: NULL pointer dereference in the caseless_hash function

There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Gnome
Products
Libgxps
CVE-2018-10767

libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c

There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Gnome Redhat
Products
Libgxps Ansible Tower Enterprise Linux and 3 more
CVE-2018-10733

libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Gnome Opensuse Redhat
Products
Libgxps Leap Ansible Tower and 4 more