Stack-based Buffer Over-read in GLib Affecting libgxps by Red Hat

CVE-2018-10767

What is CVE-2018-10767?

A stack-based buffer over-read has been identified in the GLib library within the function gxps_images_guess_content_type located in gxps-images.c of the libgxps package. This issue arises because the implementation fails to handle negative return values from the g_input_stream_read function appropriately. When processing crafted input, this oversight can be exploited to create a remote denial of service, leading to potential disruptions in service for affected systems.

References