VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 16, 2018· Updated Jun 17, 2026

CVE-2018-10112

CVE-2018-10112

Description

An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Gegl/Gegl2 versions
    cpe:2.3:a:gegl:gegl:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gegl:gegl:*:*:*:*:*:*:*:*range: <=0.3.32
    • (no CPE)range: <=0.3.32
  • GNOME Foundation/geglllm-fuzzy
    Range: <=0.3.32
  • babl/bablllm-fuzzy
    Range: =0.1.46

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.