It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service (CVE-2018-6196, CVE-2018-6197).
It was discovered that w3m incorrectly handled temporary files. An attacker could possibly use this to overwrite arbitrary files (CVE-2018-6198).