In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pixmanUpgrade pixman-develUpgrade mingw64-pixmanUpgrade mingw32-pixman | Dec 19, 2023 | Nov 3, 2022 |
| Alpine Linux | — | Upgrade pixman | Mar 26, 2024 | Nov 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade pixman-develUpgrade pixmanUpgrade pixman-debuginfo | May 20, 2026 | May 20, 2026 |
| Centos_linux | — | Upgrade pixman-debugsourceUpgrade pixman-develUpgrade pixman-debuginfoUpgrade pixman | Dec 13, 2023 | Nov 3, 2022 |
| Debian | — | Upgrade pixman | Nov 8, 2022 | Nov 3, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade pixman | Nov 5, 2022 | Nov 3, 2022 |
| Gentoo Linux | — | Upgrade x11-libs/pixman. | Jul 3, 2024 | Nov 3, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade pixman | Feb 13, 2023 | Nov 3, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade pixman | Jan 6, 2023 | Nov 3, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pixmanUpgrade pixman-devel | Mar 9, 2023 | Nov 3, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade pixman-develUpgrade pixman | Feb 9, 2023 | Nov 3, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade pixman | Jan 9, 2023 | Nov 3, 2022 |
| Oracle_linux | — | Upgrade pixmanUpgrade mingw64-pixmanUpgrade mingw32-pixmanUpgrade pixman-devel | Dec 13, 2023 | Nov 3, 2022 |
| Redhat_linux | — | Upgrade pixmanUpgrade pixman-debugsourceUpgrade mingw32-pixmanUpgrade pixman-debuginfoUpgrade mingw32-pixman-debuginfoNo solution existsUpgrade mingw64-pixmanUpgrade mingw64-pixman-debuginfoUpgrade pixman-devel | Nov 22, 2023 | Nov 3, 2022 |
| Rocky_linux | — | Upgrade pixman-debuginfoUpgrade pixmanUpgrade pixman-debugsourceUpgrade pixman-devel | Mar 20, 2026 | May 7, 2025 |
| Suse | — | Upgrade libpixman-1-0Upgrade libpixman-1-0-32bitUpgrade libpixman-1-0-devel | Nov 22, 2022 | Nov 3, 2022 |
| Ubuntu | — | Upgrade libpixman-1-0 (Ubuntu Pro)Upgrade libpixman-1-0Upgrade libpixman-1-dev (Ubuntu Pro) | Nov 9, 2022 | Nov 3, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub