CVE-2018-19876

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-19876
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19876.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-19876
Published
2018-12-05T20:29:00Z
Modified
2024-12-05T15:12:37.196787Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

cairo 1.16.0, in cairoftapply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

References

Affected packages

Alpine:v3.10 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.11 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.12 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.13 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.14 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.15 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.16 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.17 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.18 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.19 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.20 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.21 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Alpine:v3.9 / cairo

Package

Name
cairo
Purl
pkg:apk/alpine/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-r1

Affected versions

1.*

1.8.6-r0
1.8.8-r0
1.8.8-r1
1.8.10-r0
1.8.10-r1
1.8.10-r2
1.10.0-r0
1.10.0-r1
1.10.2-r0
1.10.2-r1
1.10.2-r2
1.10.2-r3
1.10.2-r4
1.10.2-r5
1.10.2-r6
1.10.2-r7
1.10.2-r8
1.10.2-r9
1.10.2-r10
1.12.0-r0
1.12.0-r1
1.12.2-r0
1.12.6-r0
1.12.8-r0
1.12.10-r0
1.12.12-r0
1.12.14-r0
1.12.14-r1
1.12.16-r0
1.12.16-r1
1.12.16-r2
1.14.0-r0
1.14.2-r0
1.14.2-r1
1.14.4-r0
1.14.4-r1
1.14.8-r0
1.14.8-r1
1.14.10-r0
1.14.12-r0
1.14.12-r1
1.14.12-r2
1.15.12-r0
1.16.0-r0

Debian:11 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / cairo

Package

Name
cairo
Purl
pkg:deb/debian/cairo?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.16.0-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / gitlab.freedesktop.org/cairo/cairo

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/cairo/cairo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3ad43122b21a3299dd729dc8462d6b8f7f01142d

Affected versions

1.*

1.0.0
1.1.10
1.1.2
1.1.4
1.1.6
1.1.8
1.10.0
1.10.2
1.11.2
1.11.4
1.12.0
1.12.10
1.12.12
1.12.14
1.12.16
1.12.2
1.12.4
1.12.6
1.12.8
1.14.0
1.14.2
1.15.12
1.15.14
1.15.2
1.15.4
1.15.6
1.15.8
1.16.0
1.2.0
1.2.2
1.2.4
1.3.10
1.3.12
1.3.14
1.3.16
1.3.2
1.3.4
1.3.6
1.3.8
1.4.0
1.4.10
1.4.2
1.4.4
1.4.6
1.4.8
1.5.10
1.5.12
1.5.14
1.5.16
1.5.18
1.5.2
1.5.20
1.5.4
1.5.6
1.5.8
1.6.0
1.6.2
1.6.4
1.7.2
1.7.4
1.7.6
1.8.0
1.8.2
1.8.4
1.8.6
1.9.10
1.9.12
1.9.14
1.9.2
1.9.4
1.9.6
1.9.8

Other

RELEASE_0_9_2
RELEASE_1_0_0
SNAPSHOT_0_1_1
SNAPSHOT_0_1_2
SNAPSHOT_0_1_3
SNAPSHOT_0_1_4
SNAPSHOT_0_1_5
SNAPSHOT_0_1_6
initial