CVE-2025-46333

z2d is a pure Zig 2D graphics library. Versions of z2d after 0.5.1 and up to and including 0.6.0, when writing from one surface to another using z2d.compositor.StrideCompositor.run, and higher-level operations when the anti-aliasing mode is set to .default such as Context.fill, Context.stroke,...

CVE-2025-46333

The CVE-2025-46333 issue in z2d affects versions 0.5.1 up to 0.6.0, where writing between surfaces via z2d.compositor.StrideCompositor.run and certain anti-aliasing modes can cause the source surface to be out-of-bounds on the x-axis due to a negative offset. This leads to an overflow in the stri...