CVE-2018-18197

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in libgig 4.1.0. There is an operator new[] failure (due to a big pSampleLoops heap request) in DLS::Sampler::Sampler in DLS.cpp.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Oct 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-181986.1The $opener_input_field variable in addons/mediapool/pages/index.php in REDAXO 5.6.3 is not effectively filtered and is output directly to t CVE-2018-181996.1Mediamanager in REDAXO before 5.6.4 has XSS.CVE-2018-18205.4IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript CVE-2018-182009.8There is a SQL injection in Benutzerverwaltung in REDAXO before 5.6.4.CVE-2018-182018.8qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.CVE-2018-182029.8The QLogic 4Gb Fibre Channel 5.5.2.6.0 and 4/8Gb SAN 7.10.1.20.0 modules for IBM BladeCenter have an undocumented support account with a sup CVE-2018-182036.4A vulnerability in the update mechanism of Subaru StarLink Harman head units 2017, 2018, and 2019 may give an attacker (with physical access CVE-2018-182057.5Topvision CC8800 CMTS C-E devices allow remote attackers to obtain sensitive information via a direct request for /WebContent/startup.tar.gz CVE-2018-182067.5In the client in Bytom before 1.0.6, checkTopicRegister in p2p/discover/net.go does not prevent negative idx values, leading to a crash.CVE-2018-182076.1Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter.CVE-2018-182086.1Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI.CVE-2018-182096.1XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.