CVE-2018-19208: Libwpd Project Libwpd

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.

Affected products

• Libwpd Project Libwpd: version 0.10.2 only
• Red Hat Enterprise Linux: version 7.0 only
• Suse Suse Linux Enterprise Server: version 11 only

Published 2018-11-12. Last modified 2026-06-17.