CVE-2019-6462

An issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, related to arcmaxanglefortolerancenormalized...

PT-2019-18104

Name of the Vulnerable Software and Affected Versions cairo version 1.16.0 Description An issue was discovered in the function cairo arc in direction in the file cairo-arc.c, which is related to an assertion problem. Recommendations For cairo version 1.16.0, consider restricting access to the cai...

PT-2019-6389 · Cairo +4 · Cairo +4

Name of the Vulnerable Software and Affected Versions: Cairo version 1.16.0 Description: The issue is related to an infinite loop in the arc error normalized function in the cairo-arc.c file of the Cairo vector graphics library. This loop has an unreachable exit condition. Exploitation of this...

Fedora 29 : cairo (2018-3a195026f5)

This update lowers amount of color artefacts around glyphs when subpixel rendering is enabled for text by using freetype's default LCD filter. It also fixes a crash caused by using of wrong function for freeing of memory CVE-2018-19876. Note that Tenable Network Security has extracted the precedi...

SUSE SLED15 / SLES15 Security Update : cairo (SUSE-SU-2018:1873-1)

This update for cairo fixes the following issues: The following security vulnerability was addressed : - CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c by replacing the malloc implementation with cairomalloc and checking the size before memory allocation bsc1049092 Note th...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

USN-3843-1: pixman vulnerability

It was discovered that pixman incorrectly handled the generalcompositerect function. A remote attacker could use this issue to cause pixman to crash, resulting in a denial of service, or possibly execute arbitrary code...

[SECURITY] Fedora 29 Update: cairo-1.16.0-3.fc29

Cairo is a 2D graphics library designed to provide high-quality display and print output. Currently supported output targets include the X Window System, in-memory image buffers, and image files PDF, PostScript, and SVG. Cairo is designed to produce consistent output on all output media while...

Memory corruption

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

ALPINE-CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

DEBIAN-CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

CVE-2018-19876

CVE-2018-19876 affects cairo 1.16.0 via cairo_ft_apply_variations() in cairo-ft-font.c, where memory is freed with an allocator incompatible with WebKit’s fastMalloc, causing a crash or memory corruption. Arch Linux ASA-201902-19 notes an upgrade to 1.16.0-2 to fix arbitrary code execution; upstr...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

PT-2018-15134 · Cairo +1 · Cairo +1

Name of the Vulnerable Software and Affected Versions: cairo version 1.16.0 Description: The issue occurs in the cairo ft apply variations function, located in cairo-ft-font.c, where memory is freed using a function incompatible with WebKit's fastMalloc, resulting in an application crash with a...

Gnuplot Buffer Overflow Vulnerability

Gnuplot is an open source plotting software. A buffer overflow vulnerability exists in the cairo.trm file in Gnuplot version 5.2.5, where the program fails to detect the size of arguments sent to the 'set font' function. The vulnerability can be exploited to hijack control flow with font names of...

UBUNTU-CVE-2018-19492

An issue was discovered in cairo.trm in Gnuplot 5.2.5. This issue allows an attacker to conduct a buffer overflow with an arbitrary amount of data in the cairotrmoptions function. This flaw is caused by a missing size check of an argument passed to the "set font" function. This issue occurs when...