CVE-2018-18193

The CVE-2018-18193 issue affects libgig 4.1.0, specifically a heap allocation failure in DLS.cpp via DLS::File::File caused by a large pWavePoolTable heap request (operator new[]). The Red Hat, SUSE, Debian, Ubuntu, and OSV entries all reflect the same underlying flaw. No remediation/patch detail...

CVE-2018-18193

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

CVE-2018-18192

CVE-2018-18192 affects libgig 4.1.0. The vulnerability is a NULL pointer dereference in DLS::File::GetFirstSample() within DLS.cpp, which can lead to a crash and potential denial of service as described across multiple advisories. The connected documents consistently identify the same root cause ...

CVE-2018-18192

An issue was discovered in libgig 4.1.0. There is a NULL pointer dereference in the function DLS::File::GetFirstSample in DLS.cpp...

CVE-2018-18193

An issue was discovered in libgig 4.1.0. There is operator new failure due to a big pWavePoolTable heap request in DLS::File::File in DLS.cpp...

DEBIAN-CVE-2018-14457

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in the function DLS::Info::UpdateChunks in DLS.cpp...