Vulnerability · Published Mar 18, 2021 · Assigned by redhat
CVE-2020-35492
High 7.8
In plain English
A high-severity stack buffer overflow in cairo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | cairo | 1.15.12-6.el8 | ALSA-2022:1961 |
| AlmaLinux:8 | cairo-devel | 1.15.12-6.el8 | ALSA-2022:1961 |
| AlmaLinux:8 | cairo-gobject | 1.15.12-6.el8 | ALSA-2022:1961 |
| AlmaLinux:8 | cairo-gobject-devel | 1.15.12-6.el8 | ALSA-2022:1961 |
| AlmaLinux:8 | pixman | 0.38.4-2.el8 | ALSA-2022:1961 |
| AlmaLinux:8 | pixman-devel | 0.38.4-2.el8 | ALSA-2022:1961 |
| Alpine:v3.20 | cairo | 1.16.0-r2 | ALPINE-CVE-2020-35492 |
| Alpine:v3.21 | cairo | 1.16.0-r2 | ALPINE-CVE-2020-35492 |
| Alpine:v3.22 | cairo | 1.16.0-r2 | ALPINE-CVE-2020-35492 |
| Alpine:v3.23 | cairo | 1.16.0-r2 | ALPINE-CVE-2020-35492 |
| Alpine:v3.24 | cairo | 1.16.0-r2 | ALPINE-CVE-2020-35492 |
| Debian:12 | cairo | 1.16.0-5 | DEBIAN-CVE-2020-35492 |
| Debian:13 | cairo | 1.16.0-5 | DEBIAN-CVE-2020-35492 |
| Debian:14 | cairo | 1.16.0-5 | DEBIAN-CVE-2020-35492 |
| Rocky Linux:8 | cairo | 0:1.15.12-6.el8 | RLSA-2022:1961 |
| Rocky Linux:8 | pixman | 0:0.38.4-2.el8 | RLSA-2022:1961 |
Affected products (as reported)
Weakness: CWE-121