Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
CVSS Details
- CVSS 3.1 Base Score: 2.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cairo-gobject-develUpgrade cairoUpgrade cairo-debuginfoUpgrade cairo-develUpgrade cairo-toolsUpgrade cairo-gobject | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cairo-debugsourceUpgrade cairo-toolsUpgrade cairo-gobjectUpgrade cairo-tools-debuginfoUpgrade cairoUpgrade cairo-debuginfoUpgrade cairo-develUpgrade cairo-gobject-develUpgrade cairo-gobject-debuginfo | Sep 9, 2025 | Aug 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 4, 2025 |
| Suse | — | Upgrade libcairo2-32bitUpgrade cairo-develUpgrade cairo-toolsUpgrade libcairo-gobject2Upgrade libcairo-script-interpreter2Upgrade libcairo-gobject2-32bitUpgrade libcairo2Upgrade libcairo-script-interpreter2-32bitUpgrade cairo-devel-32bit | Dec 5, 2025 | Aug 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub