CVE-2018-18718

HIGH

Gnome Gthumb < 3.6.2 - Double Free

Title source: rule

Description

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.

References (2)

[Patch, Third Party Advisory] https://gitlab.gnome.org/GNOME/gthumb/issues/18

[Third Party Advisory] https://lists.debian.org/debian-lts-announce/2018/11/msg00002.html

Scores

CVSS v3 7.8

EPSS 0.0013

EPSS Percentile 32.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (2)

gnome/gthumb < 3.6.2

debian/debian_linux

Timeline

Published Oct 29, 2018

Tracked Since Feb 18, 2026