CVE-2025-50422
LOWCairo <1.18.4 - Info Disclosure
Title source: llmDescription
Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
Exploits (1)
References (4)
Scores
CVSS v3
2.9
EPSS
0.0003
EPSS Percentile
7.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-617
Status
published
Products (1)
cairographics/Cairo
< 1.18.4
Published
Aug 04, 2025
Tracked Since
Feb 18, 2026