JLSEC-2025-13

Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-13.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-13.json
JSON Data
https://api.test.osv.dev/v1/vulns/JLSEC-2025-13
Upstream
Published
2025-10-10T13:22:08.213Z
Modified
2025-11-03T00:18:30.330889Z
Summary
cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted documen...
Details

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and renderrows functions) and cairo-image-compositor.c (the _cairoimagespansand_zero function).

Database specific
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "published": "2018-10-08T18:29:00.270Z",
            "modified": "2024-11-21T03:55:25.210Z",
            "id": "CVE-2018-18064",
            "imported": "2025-10-09T21:00:34.747Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-18064",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2018-18064"
        }
    ]
}
References

Affected packages

Julia / Cairo_jll

Package

Name
Cairo_jll
Purl
pkg:julia/Cairo_jll?uuid=83423d85-b0ee-5818-9007-b63ccbeb887a

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0+0