| Package | Affected versions | Patched versions |
|---|---|---|
| cairo | ≤ 1.12.16 |
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free