CVE-2018-10893

CVE-2018-10893 describes multiple integer and buffer overflow vulnerabilities in spice-client's handling of LZ compressed frames, affecting the spice_project spice product. A malicious server could exploit these flaws to crash the client or potentially achieve arbitrary code execution. With a CVSS score of 8.8 (High), this vulnerability is remotely exploitable with low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.