CVE-2018-18064

NameCVE-2018-18064
Descriptioncairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs916083

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cairo (PTS)buster1.16.0-4+deb10u1vulnerable
bullseye1.16.0-5vulnerable
bookworm1.16.0-7vulnerable
trixie1.18.0-1vulnerable
sid1.18.0-3vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cairosource(unstable)(unfixed)low916083

Notes

[bookworm] - cairo <ignored> (Minor issue)
[bullseye] - cairo <ignored> (Minor issue)
[buster] - cairo <ignored> (Minor issue)
[stretch] - cairo <no-dsa> (Minor issue)
[jessie] - cairo <no-dsa> (Minor issue)
https://gitlab.freedesktop.org/cairo/cairo/issues/341

Search for package or bug name: Reporting problems