CVE-2018-18197

An issue was discovered in libgig 4.1.0. There is an operator new failure due to a big pSampleLoops heap request in DLS::Sampler::Sampler in DLS.cpp...

CVE-2018-18197

CVE-2018-18197 affects libgig 4.1.0; the issue is an operator new[] failure caused by a large pSampleLoops heap request in DLS.cpp (DLS::Sampler::Sampler). This can cause allocation failure and potential impact on affected systems. Multiple sources (Red Hat, SUSE, NVD, OSV, Ubuntu, Nessus) docume...