847 matches found
caracal
Caracal Caracal은 Starknet 스마트 계약을 위한 SIERRA 표현에 대한 정적 분석 도구입니다. 기능 취약한 Cairo 코드를 감지하는 탐지기 정보를 보고하는 프린터 오염 분석 Taint analysis 데이터 흐름 분석 프레임워크 Scarb 프로젝트에서 쉽게 실행 가능 설치 사전 컴파일된 바이너리 사전 컴파일된 바이너리는 릴리스 페이지에서 확인할 수 있습니다. Cairo 컴파일러 1.x.x를 사용하는 경우 v0.1.x 바이너리를, Cairo 컴파일러 2.x.x를 사용하는 경우 v0.2.x를 사용하십시오...
caracal
Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...
CVE-2025-50422
Poppler 25.04.0 이전 버전 pdftocairo가 악성 PDF를 렌더링하고 종료 시 cairodebugresetstaticdata를 호출하면 PDF 객체 스트림을 포함하는 힙 메모리가 제대로 지워지지 않습니다. 로컬 액세스 권한이 있는 공격자는 프로세스 메모리를 덤프하여 평문 PDF 콘텐츠예: /stream /endstream 블록를 복구할 수 있습니다. 구체적인 취약점 재현 과정Cause of the vulnerability.pdf 및 POC 파일poppler-pdftocairo-poc이 첨부되어 있습니다...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093027 advisory. cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: cairo (UTSA-2026-043397)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-043397 advisory. A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093030)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093030 advisory. An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c. Tenable has extracted the precedi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cairo (UTSA-2026-093029)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093029 advisory. An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to...
ROOT-OS-DEBIAN-12-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in Cairo
A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...
Astra Linux – Vulnerability in Cairo
A issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, which is related to arcmaxanglefortolerancenormalized...
Astra Linux – Vulnerability in Firefox
A use-after-free vulnerability was identified during testing, and it was traced to an outdated Cairo library. Updating the library resolved the issue, and it may have also addressed other unknown security vulnerabilities. This vulnerability affects Firefox versions earlier than 90...
ROOT-OS-DEBIAN-11-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-50422 CVE-2025-50422 in cairo - Patched by Root
Root has patched CVE-2025-50422 in the cairo package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-49452
WeasyPrint helps web developers to create PDF documents. Prior to 69.0, WeasyPrint embeds unescaped HTML presentational-hint attribute values into CSS in weasyprint/css/init.py when presentationalhints=True. The background attribute is inserted into a background-image:url declaration and parsed b...
JLSEC-2026-776
HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...
PYSEC-2026-890 OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
Impact This vulnerability affects all accounts vanilla and ethereum flavors in the v0.2.0 release of OpenZeppelin Contracts for Cairo, which are not whitelisted on StarkNet mainnet, so only goerli deployments of v0.2.0 accounts are affected. This faulty behavior is not observed in StarkNet's...
openSUSE 16 Security Update : cairo (openSUSE-SU-2026:20697-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20697-1 advisory. This update for cairo fixes the following issue: - CVE-2025-50422: Poppler crash on malformed input bsc1247589. Tenable has extracted the preceding...
Security update for cairo (low)
openSUSE security update: security update for cairo ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20697-1 Rating: low References: bsc1247589 Cross-References: CVE-2025-50422 Affected Products: openSUSE Leap 16.0...