CVE-2018-19876

概要

参考情報

• bugs.webkit.org/show_bug.cgi · Issue Tracking
• gitlab.freedesktop.org/cairo/cairo/merge_requests/5 · Patch

cairo のその他の脆弱性

• CVE-2020-35492高 7.8A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input…
• CVE-2019-6462中 6.5An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to…
• CVE-2019-6461中 6.5An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.
• CVE-2018-18064中 6.5cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interacti…
• CVE-2017-9814高 7.5cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mis…