Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Cairo library can crash when handling malformed image data

CVE-2016-3190 · published 10 years ago
Summary

The Cairo graphics library version 1.14.1 and earlier, as shipped in Debian, can read past the end of memory if it receives image data with a negative length value. This can cause the application using the library to stop working unexpectedly. Upgrade Cairo to version 1.14.2 or later, or apply the Debian security patch, to prevent the crash.

What to do
  • Update debian cairo to version 1.14.2-2.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian cairo < 1.14.2-2
Fix: upgrade to 1.14.2-2
Debian:13 debian cairo < 1.14.2-2
Fix: upgrade to 1.14.2-2
Debian:14 debian cairo < 1.14.2-2
Fix: upgrade to 1.14.2-2
– opensuse opensuse 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
– cairographics cairo <= 1.12.16
cpe:2.3:a:cairographics:cairo:*:*:*:*:*:*:*:*
Original advisory text
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a n...
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
References
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published21 Apr 2016
Updated3 Nov 2026
First seen22 Sep 2026
Sources
DEBIAN-CVE-2016-3190 · OSV
CVE-2016-3190 · NVD
Track software like this
Free during beta