CVE-2016-3190

The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
opensuseopensuse
13.2
cairographicscairo
𝑥
≤ 1.12.16
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cairo
bookworm
1.16.0-7
fixed
bullseye
1.16.0-5
fixed
sid
1.18.2-2
fixed
trixie
1.18.2-2
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cairo
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
precise
not-affected
trusty
dne
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libcairo-gobject2
suse enterprise sap 12
1.12.16-13.1
fixed
suse enterprise sap 12 SP1
1.12.16-13.1
fixed
suse enterprise server 12
1.12.16-13.1
fixed
suse enterprise server 12 SP1
1.12.16-13.1
fixed
libcairo-gobject2-32bit
suse enterprise sap 12
1.12.16-13.1
fixed
suse enterprise sap 12 SP1
1.12.16-13.1
fixed
suse enterprise server 12
1.12.16-13.1
fixed
suse enterprise server 12 SP1
1.12.16-13.1
fixed
libcairo-script-interpreter2
suse enterprise sap 12 SP1
1.12.16-13.1
fixed
suse enterprise server 12 SP1
1.12.16-13.1
fixed
libcairo2
suse enterprise sap 12
1.12.16-13.1
fixed
suse enterprise sap 12 SP1
1.12.16-13.1
fixed
suse enterprise server 12
1.12.16-13.1
fixed
suse enterprise server 12 SP1
1.12.16-13.1
fixed
libcairo2-32bit
suse enterprise sap 12
1.12.16-13.1
fixed
suse enterprise sap 12 SP1
1.12.16-13.1
fixed
suse enterprise server 12
1.12.16-13.1
fixed
suse enterprise server 12 SP1
1.12.16-13.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
atk
RHEL 7
0:2.14.0-1.el7
fixed
atk-devel
RHEL 7
0:2.14.0-1.el7
fixed
cairo
RHEL 7
0:1.14.2-1.el7
fixed
cairo-devel
RHEL 7
0:1.14.2-1.el7
fixed
cairo-gobject
RHEL 7
0:1.14.2-1.el7
fixed
cairo-gobject-devel
RHEL 7
0:1.14.2-1.el7
fixed
cairo-tools
RHEL 7
0:1.14.2-1.el7
fixed
dconf
RHEL 7
0:0.22.0-2.el7
fixed
dconf-devel
RHEL 7
0:0.22.0-2.el7
fixed
dconf-editor
RHEL 7
0:0.22.0-2.el7
fixed
gdk-pixbuf2
RHEL 7
0:2.31.6-3.el7
fixed
gdk-pixbuf2-devel
RHEL 7
0:2.31.6-3.el7
fixed
gdk-pixbuf2-tests
RHEL 7
0:2.31.6-3.el7
fixed
glib-networking
RHEL 7
0:2.42.0-1.el7
fixed
glib2
RHEL 7
0:2.42.2-5.el7
fixed
glib2-devel
RHEL 7
0:2.42.2-5.el7
fixed
glib2-doc
RHEL 7
0:2.42.2-5.el7
fixed
glib2-fam
RHEL 7
0:2.42.2-5.el7
fixed
glibmm24
RHEL 7
0:2.42.0-1.el7
fixed
glibmm24-devel
RHEL 7
0:2.42.0-1.el7
fixed
glibmm24-doc
RHEL 7
0:2.42.0-1.el7
fixed
gobject-introspection
RHEL 7
0:1.42.0-1.el7
fixed
gobject-introspection-devel
RHEL 7
0:1.42.0-1.el7
fixed
gtk2
RHEL 7
0:2.24.28-8.el7
fixed
gtk2-devel
RHEL 7
0:2.24.28-8.el7
fixed
gtk2-devel-docs
RHEL 7
0:2.24.28-8.el7
fixed
gtk2-immodule-xim
RHEL 7
0:2.24.28-8.el7
fixed
gtk2-immodules
RHEL 7
0:2.24.28-8.el7
fixed
gtk3
RHEL 7
0:3.14.13-16.el7
fixed
gtk3-devel
RHEL 7
0:3.14.13-16.el7
fixed
gtk3-devel-docs
RHEL 7
0:3.14.13-16.el7
fixed
gtk3-immodule-xim
RHEL 7
0:3.14.13-16.el7
fixed
gtk3-immodules
RHEL 7
0:3.14.13-16.el7
fixed
gtksourceview3
RHEL 7
0:3.14.3-1.el7
fixed
gtksourceview3-devel
RHEL 7
0:3.14.3-1.el7
fixed
harfbuzz
RHEL 7
0:0.9.36-1.el7
fixed
harfbuzz-devel
RHEL 7
0:0.9.36-1.el7
fixed
harfbuzz-icu
RHEL 7
0:0.9.36-1.el7
fixed
json-glib
RHEL 7
0:1.0.2-1.el7
fixed
json-glib-devel
RHEL 7
0:1.0.2-1.el7
fixed
libgsf
RHEL 7
0:1.14.26-7.el7
fixed
libgsf-devel
RHEL 7
0:1.14.26-7.el7
fixed
libnotify
RHEL 7
0:0.7.5-8.el7
fixed
libnotify-devel
RHEL 7
0:0.7.5-8.el7
fixed
libwebkit2gtk
RHEL 7
0:2.4.9-5.el7
fixed
libxklavier
RHEL 7
0:5.4-7.el7
fixed
libxklavier-devel
RHEL 7
0:5.4-7.el7
fixed
mozjs24
RHEL 7
0:24.2.0-6.el7
fixed
mozjs24-devel
RHEL 7
0:24.2.0-6.el7
fixed
orc
RHEL 7
0:0.4.22-5.el7
fixed
orc-compiler
RHEL 7
0:0.4.22-5.el7
fixed
orc-devel
RHEL 7
0:0.4.22-5.el7
fixed
orc-doc
RHEL 7
0:0.4.22-5.el7
fixed
pango
RHEL 7
0:1.36.8-2.el7
fixed
pango-devel
RHEL 7
0:1.36.8-2.el7
fixed
pango-tests
RHEL 7
0:1.36.8-2.el7
fixed
shared-mime-info
RHEL 7
0:1.1-9.el7
fixed
webkitgtk3
RHEL 7
0:2.4.9-5.el7
fixed
webkitgtk3-devel
RHEL 7
0:2.4.9-5.el7
fixed
webkitgtk3-doc
RHEL 7
0:2.4.9-5.el7
fixed