CVE-2018-18718

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-18725.4IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code inCVE-2018-187204.8An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.CVE-2018-187214.8An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.CVE-2018-187224.8An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.CVE-2018-187234.8An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.CVE-2018-187244.8An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.CVE-2018-187254.8An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.CVE-2018-187264.8An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.CVE-2018-187277.5An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03CVE-2018-187289.8An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote CVE-2018-187299.8An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03CVE-2018-187307.5An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03
CVE-2018-18718: High severity, CVSS 7.8 | Vulnix