CVE-2018-12648: Null Pointer Dereference
Published Jun 22, 2018
·Updated
The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBPSupport.hpp in Exempi 2.4.5 has a NULL pointer dereference.
Affected Software
1 affected component
Exempi Project Exempi=2.4.5
Event History
Jun 22, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-12648?
CVE-2018-12648 has a medium severity due to the potential for a NULL pointer dereference leading to application crashes.
2
How do I fix CVE-2018-12648?
To fix CVE-2018-12648, you should update Exempi to version 2.4.6 or later where the vulnerability is addressed.
3
What software versions are affected by CVE-2018-12648?
CVE-2018-12648 specifically affects Exempi version 2.4.5.
4
What type of vulnerability is CVE-2018-12648?
CVE-2018-12648 is classified as a NULL pointer dereference vulnerability.
5
Can CVE-2018-12648 be exploited remotely?
CVE-2018-12648 is not typically exploited remotely but could be triggered by manipulating inputs processed by affected software.