CVE-2014-9766

CRITICAL

pixman < 0.32.6 - Integer Overflow in create_bits Function

Title source: llm
STIX 2.1

Description

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.

References (10)

Core 10
Core References
Various Sources x_refsource_confirm
https://bugs.freedesktop.org/show_bug.cgi?id=69014
Vendor Advisory mailing-list x_refsource_mlist
https://lists.freedesktop.org/archives/pixman/2014-April/003244.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/02/24/13
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=972647
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/02/24/15
Patch, Vendor Advisory mailing-list x_refsource_mlist
https://lists.x.org/archives/xorg-announce/2014-July/002452.html
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2918-1
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2016/dsa-3525

Scores

CVSS v3 9.8
EPSS 0.0557
EPSS Percentile 92.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-189
Status published
Products (3)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
pixman/pixman < 0.32.5
Published Apr 13, 2016
Tracked Since Feb 18, 2026