redhat cairo vulnerabilities

Latest redhat cairo CVEs

Newest publication first

1. CVE-2017-7475 cairo is vulnerable to denial of service due to a null pointer dereference

   Published 2017-05-19

   Medium·CVSS 5.5 EPSS 1.8% PoC

   Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.

2. CVE-2007-5503 Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not pro...

   Published 2007-11-30

   Medium·CVSS 6.8 EPSS 5.5%

   Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.