CVE catalog
CVE-2018-6548
UBUNTU-CVE-2018-6548
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.39% · Oct 25, 2026
A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame_ would not be changed because of code in vp9parser::Vp9HeaderParser::SetFrame. Its frame_ could be freed while the corresponding pointer would not be updated, leading to a dangling pointer. This is related to the function OutputCluster in webm_info.cc.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | oxide-qt | 16.04 | 1.9.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.10.3-0ubuntu0.15.10.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.10.3-0ubuntu0.15.10.2 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.3-0ubuntu3 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.4-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.6-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.7-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.13.6-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.14.7-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.14.9-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.15.7-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.15.8-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.16.5-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.17.7-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.17.9-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.18.3-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.18.5-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.19.4-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.20.4-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.21.5-0ubuntu0.16.04.1 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: