CVE-2018-10114: Buffer Overflow
An issue was discovered in GEGL through 0.3.32. The geglbufferiteratereadsimple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppmloadreadheader function in operations/external/ppm-load.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10114?
The severity of CVE-2018-10114 is high, with a severity value of 8.8.
How does CVE-2018-10114 affect GEGL?
CVE-2018-10114 affects GEGL versions up to 0.3.32.
What is the impact of CVE-2018-10114?
CVE-2018-10114 can result in a denial of service (write access violation) or possibly have unspecified other impact on the affected system.
How can CVE-2018-10114 be exploited?
CVE-2018-10114 can be exploited by remote attackers through a malformed PPM file.
Is there a fix available for CVE-2018-10114?
At the time of writing, there is no known fix or patch available for CVE-2018-10114. It is recommended to update to a version of GEGL that is not affected by this vulnerability, if available.