CVE-2018-10733

The CVE-2018-10733 issue is a heap-based buffer over-read in the libgxps component, specifically in ft_font_face_hash of gxps-fonts.c, affected through libgxps up to version 0.3.0. A crafted input can enable a remote denial of service. Connected advisories from multiple distributions (e.g., SUSE,...

CVE-2018-10767

CVE-2018-10767 is a vulnerability in libgxps up to version 0.3.0, caused by a stack-based buffer over-read in gxps_images_guess_content_type (gxps-images.c) when negative return values from g_input_stream_read are not rejected. A crafted input can trigger a remote denial of service. The connected...

CVE-2017-11590

CVE-2017-11590 affects libgxps 0.2.5 due to a NULL pointer dereference in the caseless_hash function (gxps-archive.c). A crafted input may cause remote denial of service. The CVSS metrics in the initial entry indicate 4.3 (CVSS v2) and 7.5 (CVSS v3) with NETWORK access, low complexity and no user...