DocumentationOverview
About vulnerability
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 18.04 ELS
- Affected packages:
- libgxps @ 0.3.2 (+5 more)