CVE-2018-6924: Freebsd

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory.

Affected products

• Freebsd Freebsd: version 10.4 only; version 11.2 only; from 11.0, before 11.1 (fixed in 11.1)

Published 2018-09-12. Last modified 2026-06-17.