Heap-Based Buffer Overflow in Wine Affects Multiple Releases
CVE-2018-12932

9.8CRITICAL

Key Information:

Vendor: Winehq
Status: Wine
Vendor: CVE Published:; 28 June 2018

What is CVE-2018-12932?

The PlayEnhMetaFileRecord function in the Wine application, specifically in enhmetafile.c, is susceptible to a heap-based buffer overflow due to improper handling of a large pAlphaBlend->cbBitsSrc value. This flaw can lead to a denial of service and may allow attackers to exploit the system in ways that cause unspecified impacts.