CVE-2018-18064

2018-10-0818:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.6%

JSON

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

CPENameOperatorVersion
cairoeq1.2.2
cairoeq1.9.12
cairoeq1.3.6
cairoeq1.1.6
cairoeq1.15.8
cairoeq1.3.2
cairoeq1.8.0
cairoeq1.11.2
cairoeq1.4.2
cairoeq1.5.2