Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cairo-develUpgrade cairo-gobjectUpgrade cairoUpgrade cairo-gobject-devel | Dec 4, 2019 | May 19, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cairoUpgrade cairo-gobject-develUpgrade cairo-develUpgrade cairo-gobject | Dec 18, 2019 | May 19, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cairo-gobject-develUpgrade cairoUpgrade cairo-develUpgrade cairo-gobject | Feb 3, 2021 | May 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 23, 2017 |
| Suse | — | Upgrade libcairo2-32bitUpgrade cairo-32bitUpgrade cairoUpgrade cairo-develUpgrade cairo-docUpgrade cairo-x86Upgrade cairo-devel-32bitUpgrade libcairo-script-interpreter2Upgrade libcairo2Upgrade libcairo-gobject2Upgrade libcairo-gobject2-32bit | Jun 26, 2017 | May 19, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub