Heap-based Buffer Over-read in libgxps Affects Remote Service Functionality
CVE-2018-10733

6.5MEDIUM

Key Information:

Vendor: Gnome
Status: Libgxps
Vendor: CVE Published:; 4 May 2018

What is CVE-2018-10733?

The libgxps library, specifically within the function responsible for handling font face hashes in gxps-fonts.c, is susceptible to a heap-based buffer over-read. By providing specially crafted input, an attacker could trigger this vulnerability, potentially leading to a denial of service condition. This issue is present in versions up to 0.3.0 of the library, which could expose systems using it to remote attacks that compromise service availability.