CVE-2018-10111: Gegl

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.

Affected products

• Gegl Gegl: up to and including 0.3.32

Published 2018-04-16. Last modified 2026-06-17.