Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cairo-gobjectUpgrade cairo-develUpgrade cairoUpgrade cairo-gobject-devel | Dec 4, 2019 | May 19, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cairo-gobjectUpgrade cairoUpgrade cairo-gobject-develUpgrade cairo-devel | Dec 18, 2019 | May 19, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cairo-gobjectUpgrade cairo-develUpgrade cairo-gobject-develUpgrade cairo | Feb 3, 2021 | May 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 23, 2017 |
| Suse | — | Upgrade libcairo2Upgrade libcairo-gobject2-32bitUpgrade cairo-devel-32bitUpgrade libcairo-gobject2Upgrade libcairo-script-interpreter2Upgrade libcairo2-32bitUpgrade cairo-32bitUpgrade cairo-develUpgrade cairo-docUpgrade cairo-x86Upgrade cairo | Jun 26, 2017 | May 19, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub