High
Security advisory
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-10756
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:24 UTC · Revision 1
Source evidence
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
osv:CVE-2018-10756
Complete source record
{
"id": "e6ac37a6b217a9a8052b56a221736e6a2a2a8cee2eebeac17e8facfd967e9ced",
"url": "https://osv.dev/vulnerability/CVE-2018-10756",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-10756",
"summary": "Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.",
"evidence": "osv:CVE-2018-10756",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2018-10756",
"aliases": [
"CVE-2018-10756"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/transmission/transmission",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "bb6b5a062ee594dfd4b7a12a6b6e860c43849bfd"
},
{
"fixed": "2123adf8e5e1c2b48791f9d22fc8c747e974180e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "3.00"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "2123adf8e5e1c2b48791f9d22fc8c747e974180e"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"2.92",
"2.91",
"2.90",
"2.83",
"2.82",
"2.81",
"2.80",
"2.74",
"2.73",
"2.72",
"2.71",
"2.70",
"2.61",
"2.60",
"2.52",
"2.51",
"2.50",
"2.50b1",
"2.40",
"2.40b3",
"2.40b2",
"2.40b1",
"2.33",
"2.32",
"2.31",
"2.30",
"2.30b4",
"2.30b3",
"2.30b2",
"2.30b1",
"2.21",
"2.20",
"2.20b4",
"2.20b3",
"2.20b2",
"2.20b1",
"2.13",
"2.12",
"2.11",
"2.10",
"2.00",
"1.91",
"1.90",
"1.83",
"1.82",
"1.81",
"1.80",
"1.80b5",
"1.74",
"1.73",
"1.72",
"1.71",
"1.70",
"1.61",
"1.60",
"1.40",
"1.32",
"1.31",
"1.22",
"1.21",
"1.20",
"1.11",
"1.10",
"1.06",
"0.80",
"0.7",
"0.6",
"0.5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10756.json",
"vanir_signatures": [
{
"id": "CVE-2018-10756-3e0a8003",
"digest": {
"length": 134,
"function_hash": "194995719330406091812826183943619373024"
},
"source": "https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e",
"target": {
"file": "libtransmission/variant.c",
"function": "nodeDestruct"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-10756-c2cb0d50",
"digest": {
"threshold": 0.9,
"line_hashes": [
"205341425966775455266947803454072864342",
"186298122512339726067490783789045647475",
"241841024893850238989383601383399329181",
"297769203373723619936908509348520953877",
"16281207192845962926434539192494503102",
"36661329408352694312598255970400150267",
"165787236079533757607666994787189528202",
"170735048636454511546035620715548904480",
"196854580085047319841680633566985729845",
"148621558390534263943533350062913747949",
"237725762747458195177517906863083938719",
"177690536450336511186038219104097524502",
"190178365917296507824607380120311876405",
"70417715182752542784090011700410117285",
"19387239828159012246949123632929771867",
"310215334520923315609818534253902234510",
"120906795045880473082725910541673206916",
"152960111655223256145355087776338936205",
"281845614597655727281794179635007353388",
"187469731113895534418159046986519023829",
"164995996755799471948723899102297508332",
"214147291582426748995512608869030643900",
"89361456510166854025102894971283044538",
"335857462444111579407503361944048457622",
"28846016962681830002232241096011907321",
"172493778502767576802886301696417933935"
]
},
"source": "https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e",
"target": {
"file": "libtransmission/variant.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-10756-eb8dba84",
"digest": {
"length": 771,
"function_hash": "17388500939090276674131285024898318880"
},
"source": "https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e",
"target": {
"file": "libtransmission/variant.c",
"function": "nodeConstruct"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:28:30Z"
}
}
],
"modified": "2026-10-20T13:28:30.635719935Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CD3GLZ5URIK74RCGLSH72IVLDIJJMLQC/",
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVAG2HNKNRLWOACFN5F2ANJD2SQ53WI7/",
"https://lists.debian.org/debian-lts-announce/2020/05/msg00022.html",
"https://lists.debian.org/debian-lts-announce/2020/08/msg00001.html",
"https://security.gentoo.org/glsa/202007-07",
"https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e",
"https://tomrichards.net/2020/05/cve-2018-10756-transmission/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "31"
},
{
"last_affected": "31"
},
{
"introduced": "32"
},
{
"last_affected": "32"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-10756",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387716,
"published_at": "2020-05-15T16:15:11.437+00:00"
}