CVE-2018-10733

libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c

Published May 4, 2018 CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Description
There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-2803 There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.
History

No history.