Name
cairo
Version
1.18.0
Type
library
Description
The Cairo 2D vector graphics library
Licenses
(MPL-1.1 | LGPL-2.1-only) & GPL-3.0-or-later
PURL
-
CPE
cpe:2.3:*:cairographics:cairo:1.18.0:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
Meson: Require C++11
Luca Bacci <luca.bacci982@gmail.com>
2
Patch #2
Fan Xin <fan.xin@jp.fujitsu.com>
CVE-2017-7475
3
Require C11
Adrian Johnson <ajohnson@redneon.com>
Vulnerabilities#
Name
Analysis
Description
Exploitable
Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
Patched
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.