Fluid Attacks Database

Description

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 11	cairo	=1.16.0-5 \|\| =1.16.0-6 \|\| =1.16.0-7 \|\| =1.17.8-1 \|\| =1.17.8-2 \|\| =1.17.8-3 \|\| =1.18.0-1 \|\| =1.18.0-1~hurd.1 \|\| =1.18.0-2 \|\| =1.18.0-3 \|\| =1.18.2-1 \|\| =1.18.2-2 \|\| =1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3
debian 12	cairo	=1.16.0-7 \|\| =1.17.8-1 \|\| =1.17.8-2 \|\| =1.17.8-3 \|\| =1.18.0-1 \|\| =1.18.0-1~hurd.1 \|\| =1.18.0-2 \|\| =1.18.0-3 \|\| =1.18.2-1 \|\| =1.18.2-2 \|\| =1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3
debian 13	cairo	=1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3
debian 14	cairo	=1.18.4-1 \|\| =1.18.4-2 \|\| =1.18.4-3
rpm rhel7	cairo	-
rpm rhel8	cairo	-
rpm rhel6	firefox	-
rpm rhel8	mingw-cairo	-
rpm rhel6	chromium-browser	-
rpm rhel6	thunderbird	-

Aliases

1. CVE-2018-180642. NVD-2018-180643. OSV-DEBIAN-2018-180644. OSV-2018-180645. SECURITY-TRACKER-CVE-2018-18064

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.