MGASA-2018-0044
Updated wayland packages fix security vulnerability
It is possible to trigger heap overflows due to an integer overflow while parsing images. The integer overflow occurs because the chosen limit 0x10000 for dimensions is too large for 32 bit systems, because each pixel takes 4 bytes. Properly chosen values allow an overflow which in turn will lead to less allocated memory than needed for subsequent reads (rhbz#1522638).
What each source reports
OSV No score
Updated wayland packages fix security vulnerability
It is possible to trigger heap overflows due to an integer overflow while parsing images. The integer overflow occurs because the chosen limit 0x10000 for dimensions is too large for 32 bit systems, because each pixel takes 4 bytes. Properly chosen values allow an overflow which in turn will lead to less allocated memory than needed for subsequent reads (rhbz#1522638).
- Record
MGASA-2018-0044- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2018-0044 is a vulnerability with no CVSS score yet in wayland, published January 3, 2018. No source lists public exploit code. Fixed in wayland 1.6.0-2.1.mga5.