CVE-2018-18064

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p72

Published

Oct 8, 2018 (Oct 8, 2018)

Modified

Jun 17, 2026

Description

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

Vendors: cairographics
Products: cairo
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.