Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:libgxps:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Libgxps (5501dae3-557a-5513-8fcd-e2b61fea4e38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libgxps |
purl2cpe | 2026-06-01 10:17:20.721751 |
pkg:deb/ubuntu/libgxps |
purl2cpe | 2026-06-01 10:17:20.721754 |
pkg:github/gnome/libgxps |
purl2cpe | 2026-06-01 10:17:20.721757 |
pkg:gitlab/gnome/libgxps |
purl2cpe | 2026-06-01 10:17:20.721760 |
pkg:rpm/centos/libgxps |
purl2cpe | 2026-06-01 10:17:20.721763 |
pkg:rpm/fedora/libgxps |
purl2cpe | 2026-06-01 10:17:20.721766 |
pkg:rpm/opensuse/libgxps |
purl2cpe | 2026-06-01 10:17:20.721768 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111132 |
vulnerable | 2026-11-03 10:16:10.574971 |
GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element
MEDIUM (6.1)
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XPS document to crash consumers like Evince and render adjacent heap memory into output.
Published: 2026-10-15T18:57:27.144Z
Updated: 2026-10-16T17:10:52.980Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10767 |
vulnerable | 2026-06-08 05:10:37.076781 |
Details available
There is a stack-based buffer over-read in calling GLib in the function gxps_images_guess_content_type of gxps-images.c in libgxps through 0.3.0 because it does not reject negative return values from a g_input_stream_read call. A crafted input will lead to a remote denial of service attack.
Published: 2018-05-06T23:00:00.000Z
Updated: 2024-08-05T07:46:46.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10733 |
vulnerable | 2026-06-08 05:10:37.039974 |
Details available
There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in libgxps through 0.3.0. A crafted input will lead to a remote denial of service attack.
Published: 2018-05-04T16:00:00.000Z
Updated: 2024-08-05T07:46:46.533Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.