CVE-2018-19876

cairo 1.16.0, in cairoftapply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

References

Affected packages

Git / gitlab.freedesktop.org/cairo/cairo

Affected ranges

Type: GIT
Repo: https://gitlab.freedesktop.org/cairo/cairo
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

3ad43122b21a3299dd729dc8462d6b8f7f01142d

Affected versions

1.*

1.0.0

1.1.10

1.1.2

1.1.4

1.1.6

1.1.8

1.10.0

1.10.2

1.11.2

1.11.4

1.12.0

1.12.10

1.12.12

1.12.14

1.12.16

1.12.2

1.12.4

1.12.6

1.12.8

1.14.0

1.14.2

1.15.12

1.15.14

1.15.2

1.15.4

1.15.6

1.15.8

1.16.0

1.2.0

1.2.2

1.2.4

1.3.10

1.3.12

1.3.14

1.3.16

1.3.2

1.3.4

1.3.6

1.3.8

1.4.0

1.4.10

1.4.2

1.4.4

1.4.6

1.4.8

1.5.10

1.5.12

1.5.14

1.5.16

1.5.18

1.5.2

1.5.20

1.5.4

1.5.6

1.5.8

1.6.0

1.6.2

1.6.4

1.7.2

1.7.4

1.7.6

1.8.0

1.8.2

1.8.4

1.8.6

1.9.10

1.9.12

1.9.14

1.9.2

1.9.4

1.9.6

1.9.8

Other

RELEASE_0_9_2

RELEASE_1_0_0

SNAPSHOT_0_1_1

SNAPSHOT_0_1_2

SNAPSHOT_0_1_3

SNAPSHOT_0_1_4

SNAPSHOT_0_1_5

SNAPSHOT_0_1_6

initial

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19876.json"