Cairo _fill_xrgb32_lerp_opaque_spans Denial of Service Vulnerability

Cairo is a cross-platform open source vector graphics library , it supports in multiple contexts to do 2D drawing , and provides high-quality display and printout . A security vulnerability in fillxrgb32lerpopaquespans in Cairo allows remote attackers to submit a special request for a denial of...

PT-2016-2277 · Cairo +2 · Cairo +2

Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.14.2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a negative span length. This is due to a buffer overflow in the fill...