CVE-2018-15854

—

CVSS 3.0

5.5 medium

EPSS

<1%p36

Published

Aug 25, 2018 (Aug 25, 2018)

Modified

Jun 17, 2026

Description

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.

Vendors: xkbcommon project canonical
Products: xkbcommon, ubuntu linux
Weakness: CWE-476
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.