CVE-2019-6462

Name of the Vulnerable Software and Affected Versions Cairo version 1.16.0

Description The issue is related to an infinite loop in the arc error normalized function in the cairo-arc.c file of the Cairo vector graphics library. This loop has an unreachable exit condition. Exploitation of this issue could allow a remote attacker to cause a denial of service.

Recommendations For Cairo version 1.16.0, consider disabling the arc error normalized function as a temporary workaround until a patch is available. Restrict access to the cairo-arc.c file to minimize the risk of exploitation. Avoid using the arc max angle for tolerance normalized related functionality in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.