CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by triggering a large pAlphaBlend->cbBitsSrc value.

• CWE-787

• https://bugs.launchpad.net/ubuntu/+source/wine/+bug/1764719Issue Tracking, Third Party Advisory
• https://bugs.winehq.org/attachment.cgi?id=61284Issue Tracking, Patch, Third Party Advisory
• https://bugs.winehq.org/show_bug.cgi?id=45105Issue Tracking, Patch, Third Party Advisory
• https://source.winehq.org/git/wine.git/commit/8d2676fd14f130f9e8f06744743423168bf8d18dIssue Tracking, Patch, Third Party Advisory
• https://source.winehq.org/git/wine.git/commit/b6da3547d8990c3c3affc3a5865aefd2a0946949Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/wine/+bug/1764719Issue Tracking, Third Party Advisory
• https://bugs.winehq.org/attachment.cgi?id=61284Issue Tracking, Patch, Third Party Advisory
• https://bugs.winehq.org/show_bug.cgi?id=45105Issue Tracking, Patch, Third Party Advisory
• https://source.winehq.org/git/wine.git/commit/8d2676fd14f130f9e8f06744743423168bf8d18dIssue Tracking, Patch, Third Party Advisory
• https://source.winehq.org/git/wine.git/commit/b6da3547d8990c3c3affc3a5865aefd2a0946949Issue Tracking, Patch, Third Party Advisory

Published

Jun 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12927Northern Electric & Power (NEP) inverter devices allow remot…
• CVE-2018-12928In the Linux kernel 4.15.0, a NULL pointer dereference was d…
• CVE-2018-12929ntfs_read_locked_inode in the ntfs.ko filesystem driver in t…
• CVE-2018-1293Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-12930ntfs_end_buffer_async_read in the ntfs.ko filesystem driver …
• CVE-2018-12931ntfs_attr_find in the ntfs.ko filesystem driver in the Linux…
• CVE-2018-12933PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows at…
• CVE-2018-12934remember_Ktype in cplus-dem.c in GNU libiberty, as distribut…
• CVE-2018-12938Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-12939A directory traversal flaw in SeedDMS (formerly LetoDMS and …
• CVE-2018-1294If a user of Apache Commons Email (typically an application …
• CVE-2018-12940Unrestricted file upload vulnerability in "op/op.UploadChunk…