CyberSec.Space Logo
Back to CVE Browser

CVE-2018-18718

HIGH
7.8
CVSS Severity Score
EPSS Score0.0720%
EPSS Percentile35.97th
PublishedOct 29, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.

Affected Platforms (CPE)

📦
Gnome

Gthumb

<= 3.6.2
💻
Debian

Debian Linux

= 8.0

References & Advisories

🔗 https://gitlab.gnome.org/GNOME/gthumb/issues/18
🔗 https://lists.debian.org/debian-lts-announce/2018/11/msg00002.html
🔗 https://gitlab.gnome.org/GNOME/gthumb/issues/18
🔗 https://lists.debian.org/debian-lts-announce/2018/11/msg00002.html

Related Vulnerabilities

CVE-2019-203267.8

A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME...

CVE-2020-364275.5

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.

CVE-2026-53430

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

CVE-2026-48854

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...