Search for packages
| purl | pkg:alpm/archlinux/cairo@1.17.4-4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9xcs-qa8x-sqfy
Aliases: CVE-2020-35492 |
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-31T11:38:00.491142+00:00 | Arch Linux Importer | Affected by | VCID-9xcs-qa8x-sqfy | https://security.archlinux.org/AVG-1391 | 37.0.0 |