Vulnerabilities > Cairographics > High

DATE CVE VULNERABILITY TITLE RISK
2021-03-18 CVE-2020-35492 Out-of-bounds Write vulnerability in Cairographics Cairo
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4.
local
low complexity
cairographics CWE-787
7.8
2017-07-17 CVE-2017-9814 Out-of-bounds Read vulnerability in multiple products
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
network
low complexity
cairographics opensuse CWE-125
7.5
2016-04-21 CVE-2016-3190 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
network
low complexity
opensuse cairographics CWE-119
7.5