In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mingw32-pixmanalma-upgrade-mingw64-pixmanalma-upgrade-pixmanalma-upgrade-pixman-devel | Dec 19, 2023 | Nov 3, 2022 | |
| Alpine Linux | alpine-linux-upgrade-pixman | Mar 26, 2024 | Nov 3, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pixmanamazon-linux-ami-2-upgrade-pixman-debuginfoamazon-linux-ami-2-upgrade-pixman-devel | May 20, 2026 | May 20, 2026 | |
| Centos_linux | — | centos-upgrade-pixmancentos-upgrade-pixman-debuginfocentos-upgrade-pixman-debugsourcecentos-upgrade-pixman-devel | Dec 13, 2023 | Nov 3, 2022 |
| Debian | debian-upgrade-pixman | Nov 8, 2022 | Nov 3, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Freebsd | freebsd-upgrade-package-pixman | Nov 5, 2022 | Nov 3, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-pixman | Jul 3, 2024 | Nov 3, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-pixman | Feb 13, 2023 | Nov 3, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-pixman | Jan 6, 2023 | Nov 3, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-pixmanhuawei-euleros-2_0_sp5-upgrade-pixman-devel | Mar 9, 2023 | Nov 3, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-pixmanhuawei-euleros-2_0_sp8-upgrade-pixman-devel | Feb 9, 2023 | Nov 3, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-pixman | Jan 9, 2023 | Nov 3, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-mingw32-pixmanoracle-linux-upgrade-mingw64-pixmanoracle-linux-upgrade-pixmanoracle-linux-upgrade-pixman-devel | Dec 13, 2023 | Nov 3, 2022 |
| Redhat_linux | redhat-upgrade-mingw32-pixmanredhat-upgrade-mingw32-pixman-debuginforedhat-upgrade-mingw64-pixmanredhat-upgrade-mingw64-pixman-debuginforedhat-upgrade-pixmanredhat-upgrade-pixman-debuginforedhat-upgrade-pixman-debugsourceredhat-upgrade-pixman-devel | Nov 22, 2023 | Nov 3, 2022 | |
| Rocky_linux | rocky-upgrade-pixmanrocky-upgrade-pixman-debuginforocky-upgrade-pixman-debugsourcerocky-upgrade-pixman-devel | Mar 20, 2026 | May 7, 2025 | |
| Suse | — | suse-upgrade-libpixman-1-0suse-upgrade-libpixman-1-0-32bitsuse-upgrade-libpixman-1-0-devel | Nov 22, 2022 | Nov 3, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libpixman-1-0ubuntu-pro-upgrade-libpixman-1-devubuntu-upgrade-libpixman-1-0 | Nov 9, 2022 | Nov 3, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub