{"id":"CVE-2017-9814","aliases":["DEBIAN-CVE-2017-9814","EUVD-2017-18729","GHSA-8c55-f8rh-4fh4","JLSEC-2025-12","MGASA-2022-0186","SUSE-SU-2018:1195-1","SUSE-SU-2018:1453-1","SUSE-SU-2018:1873-1","SUSE-SU-2020:1937-1","UBUNTU-CVE-2017-9814","USN-5407-1","USN-8140-1","openSUSE-SU-2020:1003-1","openSUSE-SU-2024:10671-1"],"status":"published","title":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03435,"percentile":0.89042,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2017-07-14T05:00:00Z","modified":"2026-09-01T20:03:52Z","fixes":[{"ecosystem":"Debian:12","package":"cairo","fixed_in":["1.16.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cairo","fixed_in":["1.16.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cairo","fixed_in":["1.16.0-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Cairo_jll","fixed_in":["1.16.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"cairo","fixed_in":["1.16.0-6.2.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"cairo","fixed_in":["1.15.2-25.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"cairo","fixed_in":["1.15.2-25.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"cairo","fixed_in":["1.15.2-25.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cairo","fixed_in":["1.15.2-25.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"cairo","fixed_in":["1.15.10-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"cairo","fixed_in":["1.15.10-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"cairo","fixed_in":["1.16.0-4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"cairo","fixed_in":["1.16.0-4.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cairo","fixed_in":["1.14.6-1ubuntu0.1~esm1","1.14.6-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cairo","fixed_in":["1.15.10-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cairo","fixed_in":["1.16.0-4ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cairo","fixed_in":["1.16.0-5ubuntu2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"cairo","fixed_in":["1.16.0-lp151.5.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"Cairo_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.16.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-6.2.mga8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-25.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-25.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-25.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.2-25.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-2.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-2.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.8-2.3.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-4.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.6-1ubuntu0.1~esm1"}]}],"versions":["1.14.2-2ubuntu2","1.14.4-1","1.14.6-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+esm1"}]}],"versions":["1.14.10-1ubuntu1","1.15.8-2","1.15.8-3","1.15.10-2","1.15.10-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-4ubuntu1+esm1"}]}],"versions":["1.16.0-4","1.16.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-5ubuntu2.1"}]}],"versions":["1.16.0-5ubuntu1","1.16.0-5ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.6-1ubuntu0.1~esm1"}]}],"versions":["1.14.2-2ubuntu2","1.14.4-1","1.14.6-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.6-1ubuntu0.1~esm2"}]}],"versions":["1.14.2-2ubuntu2","1.14.4-1","1.14.6-1","1.14.6-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.10-2ubuntu0.1+esm1"}]}],"versions":["1.14.10-1ubuntu1","1.15.8-2","1.15.8-3","1.15.10-2","1.15.10-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-4ubuntu1+esm1"}]}],"versions":["1.16.0-4","1.16.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-5ubuntu2.1"}]}],"versions":["1.16.0-5ubuntu1","1.16.0-5ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.0-lp151.5.3.1"}]}]}],"products":[{"vendor":"cairographics","product":"cairo"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://bugs.freedesktop.org/show_bug.cgi?id=101547","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://security.gentoo.org/glsa/201904-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9814"},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-8c55-f8rh-4fh4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9814","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0186.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30412","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5407-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181195-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1049092","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181453-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1007255","tags":["report"]},{"url":"https://bugzilla.suse.com/1036789","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7475","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181873-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201937-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-9814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9814","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8140-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-35492","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6461","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L2ZFWT4IIM2TWOMRFGKHBQTXHZNQL3TI/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0528","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-9814","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-14T05:00:00Z","modified":"2024-08-05T17:18:01.936Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-18729","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-14T05:00:00Z","modified":"2024-08-05T17:18:01Z","updated_at":"2026-11-03T02:23:26.706423Z"}],"ghsa":[{"id":"GHSA-8c55-f8rh-4fh4","title":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2022-05-13T01:11:29Z","modified":"2025-04-20T03:40:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:01:49.006624Z"}],"nvd":[{"id":"CVE-2017-9814","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-17T13:18:30.937Z","modified":"2026-06-17T01:28:58.77Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:54.012105Z"}],"osv":[{"id":"CVE-2017-9814","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-17T13:18:30.937Z","modified":"2026-04-16T04:31:51.439416439Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2017-9814","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-17T13:18:30.937Z","modified":"2026-09-01T20:03:52.213777631Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"JLSEC-2025-12","title":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2025-10-10T13:22:08.213Z","modified":"2026-07-23T22:30:06.498205373Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"UBUNTU-CVE-2017-9814","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.","status":"published","published":"2017-07-17T13:18:00Z","modified":"2026-04-22T11:38:40.563258Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"MGASA-2022-0186","title":"Updated cairo packages fix security vulnerability","description":"cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers\nto cause a denial of service (out-of-bounds read) because of mishandling of\nan unexpected malloc(0) call. (CVE-2017-9814)\n","status":"published","published":"2022-05-15T10:06:40Z","modified":"2026-04-16T04:44:48.07185636Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2020:1003-1","title":"Security update for cairo","description":"This update for cairo fixes the following issues:\n\n- Fix a memory corruption in pango.\n- Revert 'Correctly decode Adobe CMYK JPEGs in PDF export'.\n- Add more FreeeType font color conversions to support COLR/CPAL.\n- Fix crash when rendering Microsoft's Segoe UI Emoji Regular font.\n- Fix memory leaks found by Coverity.\n- Fix assertion failure in the freetype backend. (fdo#105746).\n- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc and check cmap size before allocating (bsc#1049092)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-07-19T04:27:05Z","modified":"2026-02-04T03:01:34.124022Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10671-1","title":"cairo-devel-1.16.0-3.14 on GA media","description":"These are all security issues fixed in the cairo-devel-1.16.0-3.14 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:00:53.415816Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:1195-1","title":"Security update for cairo","description":"This update for cairo fixes the following issues:\n\n  - CVE-2017-9814: out-of-bounds read in cairo-truetype-subset.c could lead to denial of service (bsc#1049092).\n","status":"published","published":"2018-05-09T17:59:41Z","modified":"2026-02-04T03:03:42.963369Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1453-1","title":"Security update for cairo","description":"This update for cairo fixes the following issues:\n\n- CVE-2016-9082: Fixed a segfault when using \u003e4GB images since int values were used\n  for pointer operations (bsc#1007255).\n- CVE-2017-9814: Replace malloc with _cairo_malloc and check cmap size before\n  allocating to prevent DoS (bsc#1049092).\n- CVE-2017-7475: Fix a segfault in get_bitmap_surface due to malformed font (bsc#1036789).\n","status":"published","published":"2018-05-28T14:46:22Z","modified":"2026-02-04T03:17:27.808531Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1873-1","title":"Security update for cairo","description":"This update for cairo fixes the following issues:\n\nThe following security vulnerability was addressed:\n\n- CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c by\n  replacing the malloc implementation with _cairo_malloc and checking the size\n  before memory allocation (bsc#1049092)\n","status":"published","published":"2018-07-03T16:09:20Z","modified":"2026-02-04T03:42:40.123489Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2020:1937-1","title":"Security update for cairo","description":"This update for cairo fixes the following issues:\n\n- Fix a memory corruption in pango.\n- Revert 'Correctly decode Adobe CMYK JPEGs in PDF export'.\n- Add more FreeeType font color conversions to support COLR/CPAL.\n- Fix crash when rendering Microsoft's Segoe UI Emoji Regular font.\n- Fix memory leaks found by Coverity.\n- Fix assertion failure in the freetype backend. (fdo#105746).\n- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc and check cmap size before allocating (bsc#1049092)\n","status":"published","published":"2020-07-15T21:56:33Z","modified":"2026-02-04T03:22:06.775481Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-5407-1","title":"cairo vulnerabilities","description":"Gustavo Grieco, Alberto Garcia, Francisco Oca, Suleman Ali, and others\ndiscovered that Cairo incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2016-9082, CVE-2017-9814, CVE-2019-6462)\n\nStephan Bergmann discovered that Cairo incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service,\nor possibly execute arbitrary code.\n(CVE-2020-35492)\n","status":"published","published":"2022-05-10T14:15:51Z","modified":"2026-06-25T13:31:10.507053709Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-8140-1","title":"cairo vulnerabilities","description":"Alberto Garcia, Francisco Oca and Suleman Ali discovered that Cairo did\nnot properly manage memory. An attacker could possibly use this issue to\ncause Cairo to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2017-9814)\n\nIt was discovered that Cairo incorrectly handled certain angle values when\ndrawing arcs. An attacker could possibly use this issue to cause Cairo to\ncrash, resulting in a denial of service. (CVE-2019-6461)\n\nIt was discovered that Cairo incorrectly handled certain calculations when\ndrawing arcs. An attacker could possibly use this issue to cause Cairo to\nconsume resources, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2019-6462)\n\nStephan Bergmann discovered that Cairo incorrectly managed memory during\nimage composition. An attacker could use this issue to cause Cairo to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-35492)","status":"published","published":"2026-04-02T07:27:21Z","modified":"2026-06-25T13:32:31.773443458Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}