cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00189}

epss

{'score': 0.00169}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-07-14T05:00:00

Updated: 2024-08-05T17:18:01.936Z

Reserved: 2017-06-22T00:00:00

Link: CVE-2017-9814

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-07-17T13:18:30.937

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-9814

cve-icon Redhat

Severity : Low

Publid Date: 2017-06-21T00:00:00Z

Links: CVE-2017-9814 - Bugzilla