847 matches found
caracal
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...
caracal
Caracal Caracal 是一个针对 Starknet 智能合约的 SIERRA 表示的静态分析工具。 功能特点 检测器：检测易受攻击的 Cairo 代码 打印器：报告信息 污点分析 数据流分析框架 易于在 Scarb 项目中运行 安装 预编译二进制文件 预编译的二进制文件可在我们的发布页面获取。如果您使用的是 Cairo 编译器 1.x.x，请使用 v0.1.x 二进制文件；如果您使用的是 Cairo 编译器 2.x.x，请使用 v0.2.x。 从源码构建 您需要安装 Rust 编译器和 Cargo。 从 git 构建： root@kitploit: cargo install...
CVE-2025-50422
Poppler before version 25.04.0 When pdftocairo renders a malicious PDF and calls cairodebugresetstaticdata on exit, heap memory containing PDF object streams is not properly cleared. An attacker with local access can dump process memory and recover clear-text PDF content e.g., /stream /endstream...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093027 advisory. cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cairo (UTSA-2026-043397)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-043397 advisory. A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093030)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093030 advisory. An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c. Tenable has extracted the precedi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093029 advisory. An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...
ROOT-OS-DEBIAN-12-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in Cairo
A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...
Astra Linux – Vulnerability in Cairo
A issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, which is related to arcmaxanglefortolerancenormalized...
Astra Linux – Vulnerability in Firefox
A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...
ROOT-OS-DEBIAN-11-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-49452
WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...
JLSEC-2026-776
HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...
PYSEC-2026-890 OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Impact This vulnerability affects all accounts vanilla and ethereum flavors in the v0.2.0 release of OpenZeppelin Contracts for Cairo, which are not whitelisted on StarkNet mainnet, so only goerli deployments of v0.2.0 accounts are affected. This faulty behavior is not observed in StarkNet's...
openSUSE 16 Security Update : cairo (openSUSE-SU-2026:20697-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20697-1 advisory. This update for cairo fixes the following issue: - CVE-2025-50422: Poppler crash on malformed input bsc1247589. Tenable has extracted the preceding...
Security update for cairo (low)
openSUSE security update: security update for cairo ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20697-1 Rating: low References: bsc1247589 Cross-References: CVE-2025-50422 Affected Products: openSUSE Leap 16.0...