CVE-2018-10733

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3140Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3505Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1574844Exploit, Issue Tracking, Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00005.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3140Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3505Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1574844Exploit, Issue Tracking, Patch, Third Party Advisory

Timeline

Published: May 4, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018