{"id":"JLSEC-2025-13","summary":"cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted...","details":"cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and `render_rows` functions) and cairo-image-compositor.c (the `_cairo_image_spans_and_zero` function).","modified":"2026-07-23T22:30:07.617765482Z","published":"2025-10-10T13:22:08.213Z","upstream":["CVE-2018-18064"],"database_specific":{"license":"CC-BY-4.0","sources":[{"modified":"2026-06-17T01:46:43.463Z","published":"2018-10-08T18:29:00.270Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2018-18064","html_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18064","database_specific":{"status":"Modified"},"id":"CVE-2018-18064","imported":"2026-07-17T20:36:07.344Z"}]},"references":[{"type":"WEB","url":"https://gitlab.freedesktop.org/cairo/cairo/issues/341"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"}],"affected":[{"package":{"name":"Cairo_jll","ecosystem":"Julia","purl":"pkg:julia/Cairo_jll?uuid=83423d85-b0ee-5818-9007-b63ccbeb887a"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.16.0+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-13.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V2","score":"AV:N/AC:M/Au:N/C:N/I:N/A:P"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}