Backported patch for CVE-2018-10756.