Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
CVSS Details
- CVSS 3.1 Base Score: 2.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cairo-develUpgrade cairo-gobjectUpgrade cairo-toolsUpgrade cairo-debuginfoUpgrade cairo-gobject-develUpgrade cairo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cairo-gobject-debuginfoUpgrade cairo-gobject-develUpgrade cairo-debuginfoUpgrade cairo-gobjectUpgrade cairoUpgrade cairo-develUpgrade cairo-debugsourceUpgrade cairo-tools-debuginfoUpgrade cairo-tools | Sep 9, 2025 | Aug 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 4, 2025 |
| Suse | — | Upgrade libcairo-script-interpreter2-32bitUpgrade libcairo-script-interpreter2Upgrade cairo-devel-32bitUpgrade libcairo2Upgrade libcairo-gobject2-32bitUpgrade cairo-develUpgrade libcairo-gobject2Upgrade libcairo2-32bitUpgrade cairo-tools | Dec 5, 2025 | Aug 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub