CVE-2018-15854

Name of the Vulnerable Software and Affected Versions xkbcommon versions prior to 0.8.1

Description The issue allows local attackers to crash the xkbcommon parser by supplying a crafted keymap file, due to unchecked NULL pointer usage. This occurs because geometry tokens were desupported incorrectly, leading to a NULL pointer dereference.

Recommendations For versions prior to 0.8.1, update to version 0.8.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted keymap files to minimize the risk of exploitation.