CVE-2022-44638

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-44638
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-44638.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-44638
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CLSA (3)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (7)
RLSA (2)
SUSE (3)
UBUNTU (1)
Related
ALSA (3)
openSUSE (1)
SUSE (3)
Published
2022-11-03T00:00:00Z
Modified
2026-08-12T03:30:18Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44638.json"
}
References

Affected packages

Git / gitlab.freedesktop.org/pixman/pixman

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/pixman/pixman
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
37216a32839f59e8dcaa4c3951b3fcfc3f07852c
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:pixman:pixman:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.42.2"
        }
    ],
    "source": [
        "DESCRIPTION",
        "CPE_RANGE"
    ]
}

Affected versions

pixman-0.*
pixman-0.10.0
pixman-0.11.10
pixman-0.11.2
pixman-0.11.4
pixman-0.11.6
pixman-0.11.8
pixman-0.13.2
pixman-0.14.0
pixman-0.15.10
pixman-0.15.12
pixman-0.15.14
pixman-0.15.16
pixman-0.15.18
pixman-0.15.2
pixman-0.15.20
pixman-0.15.6
pixman-0.15.8
pixman-0.16.0
pixman-0.17.10
pixman-0.17.12
pixman-0.17.14
pixman-0.17.2
pixman-0.17.4
pixman-0.17.6
pixman-0.17.8
pixman-0.18.0
pixman-0.19.2
pixman-0.19.4
pixman-0.19.6
pixman-0.20.0
pixman-0.21.2
pixman-0.21.4
pixman-0.21.6
pixman-0.21.8
pixman-0.22.0
pixman-0.23.2
pixman-0.23.4
pixman-0.23.6
pixman-0.23.8
pixman-0.24.0
pixman-0.25.2
pixman-0.25.6
pixman-0.26.0
pixman-0.27.2
pixman-0.27.4
pixman-0.28.0
pixman-0.29.2
pixman-0.29.4
pixman-0.30.0
pixman-0.31.2
pixman-0.32.0
pixman-0.33.2
pixman-0.33.4
pixman-0.33.6
pixman-0.36.0
pixman-0.38.0
pixman-0.38.2
pixman-0.38.4
pixman-0.40.0
pixman-0.42.0
pixman-0.9.4
pixman-0.9.5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-44638.json"