CVE-2018-18064

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-18064
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-18064.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-18064
Related
Published
2018-10-08T18:29:00Z
Modified
2025-01-08T05:03:34.198328Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and renderrows functions) and cairo-image-compositor.c (the _cairoimagespansand_zero function).

References

Affected packages

Debian:11 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.16.0-5
1.16.0-6
1.16.0-7
1.17.8-1
1.17.8-2
1.17.8-3
1.18.0-1~hurd.1
1.18.0-1
1.18.0-2
1.18.0-3
1.18.2-1
1.18.2-2

Ecosystem specific 

{
    "urgency": "low"
}

Debian:12 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.16.0-7
1.17.8-1
1.17.8-2
1.17.8-3
1.18.0-1~hurd.1
1.18.0-1
1.18.0-2
1.18.0-3
1.18.2-1
1.18.2-2

Ecosystem specific 

{
    "urgency": "low"
}

Debian:13 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.16.0-7
1.17.8-1
1.17.8-2
1.17.8-3
1.18.0-1~hurd.1
1.18.0-1
1.18.0-2
1.18.0-3
1.18.2-1
1.18.2-2

Ecosystem specific 

{
    "urgency": "low"
}

Git / gitlab.freedesktop.org/cairo/cairo

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/cairo/cairo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d9aaea0c1e1484c632e1a6735c6ecc961c4b032b

Affected versions

1.*

1.0.0
1.1.10
1.1.2
1.1.4
1.1.6
1.1.8
1.10.0
1.10.2
1.11.2
1.11.4
1.12.0
1.12.10
1.12.12
1.12.14
1.12.16
1.12.2
1.12.4
1.12.6
1.12.8
1.14.0
1.14.2
1.15.12
1.15.14
1.15.2
1.15.4
1.15.6
1.15.8
1.2.0
1.2.2
1.2.4
1.3.10
1.3.12
1.3.14
1.3.16
1.3.2
1.3.4
1.3.6
1.3.8
1.4.0
1.4.10
1.4.2
1.4.4
1.4.6
1.4.8
1.5.10
1.5.12
1.5.14
1.5.16
1.5.18
1.5.2
1.5.20
1.5.4
1.5.6
1.5.8
1.6.0
1.6.2
1.6.4
1.7.2
1.7.4
1.7.6
1.8.0
1.8.2
1.8.4
1.8.6
1.9.10
1.9.12
1.9.14
1.9.2
1.9.4
1.9.6
1.9.8

Other

RELEASE_0_9_2
RELEASE_1_0_0
SNAPSHOT_0_1_1
SNAPSHOT_0_1_2
SNAPSHOT_0_1_3
SNAPSHOT_0_1_4
SNAPSHOT_0_1_5
SNAPSHOT_0_1_6
initial