CVE-2018-19208 — libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp

Back Back to CVE browser

MEDIUM

libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp

Published Nov 12, 2018

6.5

MEDIUM

CVSS 3.1

EPSS 1.49%

Description

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.

Affected products

Red Hat Enterprise Linux 7

libwpd-0:0.10.0-2.el7

Fixed · RHSA-2019:2126
Red Hat Enterprise Linux 5

libwpd

Will not fix
Red Hat Enterprise Linux 6

libwpd

Will not fix
Red Hat Enterprise Linux 8

libwpd

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	libwpd-0:0.10.0-2.el7	Fixed	RHSA-2019:2126
Red Hat Enterprise Linux 5	libwpd	Will not fix	n/a
Red Hat Enterprise Linux 6	libwpd	Will not fix	n/a
Red Hat Enterprise Linux 8	libwpd	Not affected	n/a

Remediation

Red Hat statement

This issue affects the versions of libwpd as shipped with Red Hat Enterprise Linux 5, 6, and 7. Red Hat Enterprise Linux 5 is now in Extended Life Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Metrics

1.49% 0.01488

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01488

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.49% (0.01488)	73.13th	v5 (v2026.06.15)
Sep 20, 2026	1.49% (0.01488)	72.91th	v5 (v2026.06.15)
Jul 20, 2024	0.07% (0.00065)	28.98th	v3 (v2023.03.01)
Jul 1, 2024	0.07% (0.00065)	28.70th	v3 (v2023.03.01)
Apr 4, 2024	0.07% (0.00073)	30.22th	v3 (v2023.03.01)
Sep 3, 2023	0.08% (0.00080)	33.11th	v3 (v2023.03.01)
Mar 7, 2023	0.10% (0.00098)	39.20th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.78% (0.00777)	21.50th	v5 (v2026.06.15)
Apr 14, 2021	0.78% (0.00777)	0.00th	v1

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (6)

https://access.redhat.com/errata/RHSA-2019:2126
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-19208
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1643752
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1649414
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-19208
https://www.cve.org/CVERecord?id=CVE-2018-19208

Link	Providers	Tags
https://access.redhat.com/errata/RHSA-2019:2126		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-19208		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1643752		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1649414		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-19208
https://www.cve.org/CVERecord?id=CVE-2018-19208