GUIX vulnerabilities
1 known vulnerability in GUIX from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
GUIX: Out-of-bounds Write
The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page_header_data_size` is never validated against the glyph data a page actually con