Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph
and FT_Render_Glyph
resulting in an application crash.
seclists.org/oss-sec/2017/q2/151
bugs.freedesktop.org/show_bug.cgi?id=100763
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
github.com/advisories/GHSA-5v3f-73gv-x7x5
github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.yml
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2017-7475