Fluid Attacks Database

Description

Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	cairo	>=0 <1.14.6-1.1	1.14.6-1.1
debian 11	cairo	>=0 <1.14.6-1.1	1.14.6-1.1
debian 13	cairo	>=0 <1.14.6-1.1	1.14.6-1.1
debian 14	cairo	>=0 <1.14.6-1.1	1.14.6-1.1
rpm rhel6	cairo	-	-
rpm rhel7	cairo	-	-
rpm rhel5	cairo	-	-

Aliases

1. CVE-2016-90822. NVD-2016-90823. OSV-DEBIAN-2016-90824. OSV-2016-90825. SECURITY-TRACKER-CVE-2016-9082

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.