VULNERABILITY INTELLIGENCE

CVE-2018-6917

CVSS score7.5 HIGH
EPSS probability1.96%
CISA KEVNot currently listed
Published2018-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references