CVE-2016-9082: Integer Overflow
Integer overflow in the writepng function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
Other sources
It was found that specially crafted SVG file can trigger crash in pngwriterow when converting the given SVG using librsvg2 and cairo. Crash happens inside libpng when trying to access invalid pointer.
Acknowledgements:
Name: Gustavo Grieco
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9082?
CVE-2016-9082 is classified as a denial of service vulnerability due to an integer overflow leading to an invalid pointer dereference.
How do I fix CVE-2016-9082?
To mitigate CVE-2016-9082, update to a fixed version of Cairo that addresses the integer overflow issue.
Which versions of Cairo are affected by CVE-2016-9082?
CVE-2016-9082 specifically affects Cairo version 1.14.6.
What type of attacks can CVE-2016-9082 be exploited for?
CVE-2016-9082 can be exploited to achieve a denial of service by causing crashes when processing specially crafted SVG files.
Is CVE-2016-9082 associated with any specific functions in Cairo?
Yes, CVE-2016-9082 is associated with the write_png function in Cairo, which is vulnerable during the conversion of SVG files.