Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
CVSS Details
- CVSS 3.1 Base Score: 2.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cairoUpgrade cairo-debuginfoUpgrade cairo-gobject-develUpgrade cairo-develUpgrade cairo-toolsUpgrade cairo-gobject | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cairo-tools-debuginfoUpgrade cairo-debugsourceUpgrade cairo-gobjectUpgrade cairo-debuginfoUpgrade cairo-toolsUpgrade cairo-develUpgrade cairoUpgrade cairo-gobject-develUpgrade cairo-gobject-debuginfo | Sep 9, 2025 | Aug 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 4, 2025 |
| Suse | — | Upgrade libcairo-gobject2-32bitUpgrade libcairo2Upgrade libcairo-script-interpreter2Upgrade libcairo-script-interpreter2-32bitUpgrade cairo-devel-32bitUpgrade libcairo2-32bitUpgrade cairo-toolsUpgrade cairo-develUpgrade libcairo-gobject2 | Dec 5, 2025 | Aug 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub