CVE-2018-10767

CVE-2018-10767 describes a stack-based buffer over-read in libgxps versions through 0.3.0, specifically within the gxps_images_guess_content_type function. This flaw, caused by improper handling of negative return values from g_input_stream_read, can be triggered by a crafted input, leading to a remote denial of service. Affected products include various GNOME and Red Hat Enterprise Linux distributions, as well as Red Hat Ansible Tower. The vulnerability is rated Medium severity with a CVSS score of 6.5, indicating a network-based attack with low complexity, requiring user interaction, and resulting in high availability impact. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has garnered minimal community discussion and media coverage, suggesting a low level of public awareness or concern.