CVE-2018-10767

libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c

Published May 6, 2018 CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Description
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-2837 There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 7:46 AM
Reserved
May 6, 2018, 12:00 AM
Status
Modified
Published
May 6, 2018, 11:29 PM
Modified
Jun 17, 2026, 1:34 AM
Severity
Low
Public date
May 5, 2018, 12:00 AM