Sploitus

CVE-2018-18064

No indexed exploits for CVE-2018-18064 yet

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

Affected products
Alt Linux, Debian, Webkitgtk, Cairo
Cairographics Cairo
≤ 1.15.14
Fix
Available
CVSS 3.1
6.5 MEDIUM
EPSS
1.5% (71th percentile)
Weakness
CWE-787
NVD status
Modified
Published
2018-10-08
CVE-2018-18064 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-18064 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-18064 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.