CVE-2017-7475

Name of the Vulnerable Software and Affected Versions Cairo version 1.15.4

Description The issue is related to a NULL pointer dereference in the FT Load Glyph and FT Render Glyph functions, resulting in an application crash.

Recommendations For Cairo version 1.15.4, consider updating to a newer version to mitigate the risk, however at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the FT Load Glyph and FT Render Glyph functions until a patch is available.