Every CVE Search/ Get API key

CVE-2013-6425

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as...

5.0 MediumFix available

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Exploit likelihood

2.88%Up 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
CVE-2013-6425
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-191
Updated
2026-11-02
CVE List No score

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
CVE-2013-6425
Updated
2026-11-02
EUVDEUVD-2013-6237 No score

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
EUVD-2013-6237
Updated
2026-11-03
GitHub AdvisoriesGHSA-pm7m-xq2w-2q3x No score

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as...

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
GHSA-pm7m-xq2w-2q3x
Weakness
CWE-191
Updated
2026-11-02
OSV No score

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
CVE-2013-6425
Updated
2026-11-02
OSVDEBIAN-CVE-2013-6425 No score

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

Record
DEBIAN-CVE-2013-6425
Updated
2026-11-02
OSVMGASA-2013-0366 No score

Updated pixman package fixes security vulnerability

Bryan Quigley discovered an integer underflow in pixman. If a user were tricked into opening a specially crafted file, an attacker could cause a denial of service via application crash (CVE-2013-6425).

Record
MGASA-2013-0366
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pixman
Debian:12
 before 0.30.2-2
0.30.2-2
pixman
Debian:13
 before 0.30.2-2
0.30.2-2
pixman
Debian:14
 before 0.30.2-2
0.30.2-2
pixman
Debian:6.0
 before 0.16.4-1+deb6u1, plus listed versions
0.16.4-1
0.16.4-1+deb6u1
pixman
Debian:7
 before 0.26.0-4+deb7u1, plus listed versions
0.26.0-4
0.26.0-4+deb7u1
pixman
Mageia:3
 before 0.28.2-2.1.mga3
0.28.2-2.1.mga3
pixman
Red Hat:enterprise_linux:5::client
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
pixman-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
pixman-devel
Red Hat:enterprise_linux:5::client
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
pixman
Red Hat:rhel_productivity:5
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
Show 14 moreShow less
Affected packages
PackageAffectedFixed
pixman-debuginfo
Red Hat:rhel_productivity:5
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
pixman-devel
Red Hat:rhel_productivity:5
 before 0:0.22.0-2.2.el5_10
0:0.22.0-2.2.el5_10
pixman
Red Hat:enterprise_linux:6::client
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-devel
Red Hat:enterprise_linux:6::client
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman
Red Hat:enterprise_linux:6::computenode
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman
Red Hat:enterprise_linux:6::server
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-devel
Red Hat:enterprise_linux:6::server
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman
Red Hat:enterprise_linux:6::workstation
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5
pixman-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.26.2-5.1.el6_5
0:0.26.2-5.1.el6_5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-6425 is a medium vulnerability (CVSS 5.0) in Pixman, published December 6, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.88%, the 86th percentile. Fixed in pixman 0.30.2-2.

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open