PT-2022-5353 · Mozilla+10 · Firefox+10
Maddie Stone
·
Published
2022-11-03
·
Updated
2025-05-02
·
CVE-2022-44638
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Pixman versions prior to 0.42.2
Description
The issue is related to an out-of-bounds write, also known as a heap-based buffer overflow, in the
rasterize edges 8 function of the Pixman library. This occurs due to an integer overflow in pixman sample floor y. The exploitation of this issue could allow a remote attacker to execute arbitrary code. The library is used for low-level graphics rendering in various open-source projects, including X.Org, Cairo, Firefox, and composite managers based on the Wayland protocol.Recommendations
For Pixman versions prior to 0.42.2, update to version 0.42.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
rasterize edges 8 function until a patch is available. Avoid using parameters that could lead to integer overflow in pixman sample floor y until the issue is resolved.Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Firefox
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu