PT-2022-5381 · Cairo · Cairo

Published 2022-07-07 · Updated 2022-07-07

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cairo (affected versions not specified)

Description The issue is related to a buffer overflow in the Cairo graphics library, specifically in the find name() function. This could allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-06695

Affected Products

Cairo

References · 3

• https://bdu.fstec.ru/vul/2022-06695 · Security Note
• https://gitlab.freedesktop.org/psychon/cairo/-/commit/53faf76e577c5f08b4fec6bbd5a2a871834ba597 · Note
• https://gitlab.freedesktop.org/cairo/cairo/-/issues/579 · Note