CVE-2018-10113

HIGH 7.5CVE-2018-10113 · Published 16/04/2018 · updated 17/06/2026

In short

CVE-2018-10113 is a HIGH (CVSS 7.5) vulnerability affecting generic graphics library (gegl).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
generic graphics library gegl	`≤ 0.3.32`	No fix yet

Description

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.

References

xiaoqx/pocs · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free