CVE-2018-19876
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-19876
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19876.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-19876
- Downstream
- Published
- 2018-12-05T20:29:00Z
- Modified
- 2025-10-21T04:32:51.401049Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
cairo 1.16.0, in cairoftapply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.
- References
Affected packages
Git / gitlab.freedesktop.org/cairo/cairo
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/cairo/cairo
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
1.*
1.0.0
1.1.10
1.1.2
1.1.4
1.1.6
1.1.8
1.10.0
1.10.2
1.11.2
1.11.4
1.12.0
1.12.10
1.12.12
1.12.14
1.12.16
1.12.2
1.12.4
1.12.6
1.12.8
1.14.0
1.14.2
1.15.12
1.15.14
1.15.2
1.15.4
1.15.6
1.15.8
1.16.0
1.2.0
1.2.2
1.2.4
1.3.10
1.3.12
1.3.14
1.3.16
1.3.2
1.3.4
1.3.6
1.3.8
1.4.0
1.4.10
1.4.2
1.4.4
1.4.6
1.4.8
1.5.10
1.5.12
1.5.14
1.5.16
1.5.18
1.5.2
1.5.20
1.5.4
1.5.6
1.5.8
1.6.0
1.6.2
1.6.4
1.7.2
1.7.4
1.7.6
1.8.0
1.8.2
1.8.4
1.8.6
1.9.10
1.9.12
1.9.14
1.9.2
1.9.4
1.9.6
1.9.8
Other
RELEASE_0_9_2
RELEASE_1_0_0
SNAPSHOT_0_1_1
SNAPSHOT_0_1_2
SNAPSHOT_0_1_3
SNAPSHOT_0_1_4
SNAPSHOT_0_1_5
SNAPSHOT_0_1_6
initial