CVE-2017-7475
MEDIUMcairo 1.15.4 - NULL Pointer Dereference via FT_Load_Glyph and FT_Render_Glyph
Title source: llmDescription
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
References (4)
Core 4
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugs.freedesktop.org/show_bug.cgi?id=100763
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2017/q2/151
Issue Tracking, Third Party Advisory, VDB Entry x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475
Mailing List mailing-list
x_refsource_mlist
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
Scores
CVSS v3
5.5
EPSS
0.0028
EPSS Percentile
51.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (3)
cairographics/cairo
1.15.4
Red Hat, Inc./Cairo
1.15.4
rubygems/cairo
1.15.4 - 1.15.5RubyGems
Published
May 19, 2017
Tracked Since
Feb 18, 2026