{"id":"CVE-2018-16428","details":"In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.","modified":"2026-08-07T15:18:39.977678Z","published":"2018-09-04T00:29:01.557Z","related":["SUSE-SU-2018:3913-1","SUSE-SU-2019:1596-1","SUSE-SU-2019:1722-1","openSUSE-SU-2024:10791-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"12.04"},{"last_affected":"12.04"},{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"}]},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2020/02/14/3"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2019/07/msg00029.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/105210"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3767-1/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3767-2/"},{"type":"FIX","url":"https://gitlab.gnome.org/GNOME/glib/commit/fccef3cc822af74699cca84cd202719ae61ca3b9"},{"type":"EVIDENCE","url":"https://gitlab.gnome.org/GNOME/glib/issues/1364"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gnome/glib","events":[{"introduced":"d0364b443805dcb832c200fcf8bf58a64fdf3e7d"},{"last_affected":"d0364b443805dcb832c200fcf8bf58a64fdf3e7d"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:glib:2.56.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.56.1"},{"last_affected":"2.56.1"}],"source":"CPE_STRING"}}],"versions":["2.56.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16428.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/glib","events":[{"introduced":"d0364b443805dcb832c200fcf8bf58a64fdf3e7d"},{"last_affected":"d0364b443805dcb832c200fcf8bf58a64fdf3e7d"},{"fixed":"fccef3cc822af74699cca84cd202719ae61ca3b9"}],"database_specific":{"cpe":"cpe:2.3:a:gnome:glib:2.56.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.56.1"},{"last_affected":"2.56.1"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.56.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16428.json","vanir_signatures_modified":"2026-08-07T15:18:39Z","vanir_signatures":[{"source":"https://gitlab.gnome.org/gnome/glib@fccef3cc822af74699cca84cd202719ae61ca3b9","target":{"file":"glib/gmarkup.c"},"deprecated":false,"digest":{"line_hashes":["27967146418341091245337691577480173759","71132367559488922544869764440102681458","198859563808106364930921395270440707469","96452346924312047733840760789155889613","296685038050425211123999464966957840432","286859789758931844681193954555906907404"],"threshold":0.9},"id":"CVE-2018-16428-b917d5c8","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2018-16428-f56c3b10","signature_type":"Function","signature_version":"v1","source":"https://gitlab.gnome.org/gnome/glib@fccef3cc822af74699cca84cd202719ae61ca3b9","target":{"file":"glib/gmarkup.c","function":"g_markup_parse_context_end_parse"},"deprecated":false,"digest":{"function_hash":"78154215784110994088640107664106133672","length":3192}}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}