CVE-2017-9814

Name of the Vulnerable Software and Affected Versions cairo versions 1.15.6 and earlier

Description The issue allows remote attackers to cause a denial of service due to an out-of-bounds read. This is because of mishandling of an unexpected malloc(0) call in the cairo-truetype-subset.c file.

Recommendations For versions 1.15.6 and earlier, update to a version later than 1.15.6 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.