libgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service (CPU consumption) via a file that begins with many '\0' characters.
https://packetstormsecurity.com/files/143983/libgedit.a-3.22.1-Denial-Of-Service.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-5620