EUVD-2019-16021

Malware in sbrugna...

Security update for cairo

This update for cairo fixes the following issues: CVE-2025-50422: Fixed Poppler crash on malformed input bsc1247589 Update to version 1.18.4: The dependency on LZO has been made optional through a build time configuration toggle. You can build Cairo against a Freetype installation that does not...

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

...

Linux Distros Unpatched Vulnerability : CVE-2018-19876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an...

cairo 1.16.0 in cairo_ft_apply_variations() in cairo-ft-font.c would free memory using a free function incompatible with WebKit's fastMalloc leading to an application crash with a "free(): invalid pointer" error.

...

UBUNTU-CVE-2019-6461

An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c...

PT-2018-15134 · Cairo +1 · Cairo +1

Name of the Vulnerable Software and Affected Versions: cairo version 1.16.0 Description: The issue occurs in the cairo ft apply variations function, located in cairo-ft-font.c, where memory is freed using a function incompatible with WebKit's fastMalloc, resulting in an application crash with a...

CVE-2017-7475

Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash...

PT-2017-9942 · Cairo +3 · Cairo +3

Name of the Vulnerable Software and Affected Versions: cairo version 1.14.6 Description: The issue is related to an integer overflow in the write png function, which can be triggered by remote attackers using a large svg file. This can cause a denial of service due to an invalid pointer...