In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided…

Published 8 y ago 2018-04-04 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

2.0%

percentile 80%

Public exploits

none known

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.

Exploit prediction (EPSS)

1.96% probability of exploitation in the next 30 days, higher than 80% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.5	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`
NVD	2.0	5.0	`AV:N/AC:L/Au:N/C:P/I:N/A:N`

Affected products

FreeBSD FreeBSD

Classification

Weakness

CWE-190 Integer Overflow or Wraparound

References

security.freebsd.org /advisories/FreeBSD-SA-18:04.vt.asc · vendor-advisory, x_refsource_FREEBSD, x_transferred
securityfocus.com /bid/103668 · vdb-entry, x_refsource_BID, x_transferred
securitytracker.com /id/1040629 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

CVE List: CVE-2018-6917
NVD: CVE-2018-6917

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.