CVE-2018-18064

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and renderrows functions) and cairo-image-compositor.c (the cairoimagespansandzero function).

References

Affected packages

Git / gitlab.freedesktop.org/cairo/cairo

Affected ranges

Type

GIT

Repo

https://gitlab.freedesktop.org/cairo/cairo

Events

Introduced

Last affected

d9aaea0c1e1484c632e1a6735c6ecc961c4b032b

Database specific

{
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:cairographics:cairo:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.15.14"
        }
    ]
}

Affected versions

1.*

1.0.0

1.1.10

1.1.2

1.1.4

1.1.6

1.1.8

1.10.0

1.11.2

1.11.4

1.12.0

1.12.10

1.12.12

1.12.14

1.12.16

1.12.2

1.12.4

1.12.6

1.12.8

1.14.0

1.14.2

1.15.12

1.15.14

1.15.2

1.15.4

1.15.6

1.15.8

1.2.0

1.2.2

1.2.4

1.3.10

1.3.14

1.3.16

1.3.2

1.3.4

1.3.6

1.3.8

1.4.0

1.4.2

1.4.6

1.4.8

1.5.10

1.5.12

1.5.14

1.5.16

1.5.18

1.5.2

1.5.20

1.5.4

1.5.6

1.5.8

1.6.0

1.6.2

1.7.2

1.7.4

1.7.6

1.8.0

1.8.2

1.9.10

1.9.12

1.9.14

1.9.2

1.9.4

1.9.6

1.9.8

Other

RELEASE_0_9_2

RELEASE_1_0_0

SNAPSHOT_0_1_1

SNAPSHOT_0_1_2

SNAPSHOT_0_1_3

SNAPSHOT_0_1_4

SNAPSHOT_0_1_5

SNAPSHOT_0_1_6

initial

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-18064.json"