CVE-2018-10126

SOURCE - nist

Summary

LibTIFF 4.0.9 has a NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c.

EPSS Score: 0.00099 (0.409)

Common Weakness Enumeration (CWE)

SOURCE - nist

NULL Pointer Dereference

SOURCE - redhat

Use After Free


debian

CREATED


UPDATED



EXPLOITABILITY SCORE

-


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow
PackageTypeOS NameOS VersionAffected RangesFix Versions
debian/tiffdebdebian12>=4.5.0-6+deb12u1Not yet available
debian/tiffdebdebian11>=4.2.0-1+deb11u5Not yet available
debian/tiffdebdebianunstable>=4.5.1+git230720-4Not yet available
debian/tiffdebdebian13>=4.5.1+git230720-4Not yet available
debian/tiffdebdebian10>=4.1.0+git191117-2~deb10u4Not yet available

Severity and metrics

No CVSS data available from this source.

nist

CREATED


UPDATED



EXPLOITABILITY SCORE

2.8


EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

6.5medium

ubuntu

CREATED


UPDATED



EXPLOITABILITY SCORE

2.8


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.5low

redhat

CREATED


UPDATED



EXPLOITABILITY SCORE

1.8


EXPLOITS FOUND
-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

3.3low

inthewild

CREATED


UPDATED



EXPLOITABILITY SCORE

-


EXPLOITS FOUND

-


COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE