High severity7.8NVD Advisory· Published Oct 29, 2018· Updated Jun 17, 2026
CVE-2018-18718
CVE-2018-18718
Description
An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.
Affected products
6cpe:2.3:a:gnome:gthumb:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnome:gthumb:*:*:*:*:*:*:*:*range: <=3.6.2
- (no CPE)range: <=3.6.2
- osv-coords3 versionspkg:rpm/opensuse/gthumb&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/gthumb&distro=openSUSE%20Tumbleweedpkg:rpm/suse/gthumb&distro=SUSE%20Package%20Hub%2015
< 3.6.1-bp150.2.3.1+ 2 more
- (no CPE)range: < 3.6.1-bp150.2.3.1
- (no CPE)range: < 3.12.0-3.1
- (no CPE)range: < 3.6.1-bp150.2.3.1
Patches
Vulnerability mechanics
References
2- gitlab.gnome.org/GNOME/gthumb/issues/18nvdPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/11/msg00002.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.