CVE-2015-5297

Name of the Vulnerable Software and Affected Versions pixman versions prior to 0.32.8

Description An integer overflow issue has been reported in the general composite rect() function. This issue could be exploited by an attacker to cause an application using pixman to crash or potentially execute arbitrary code.

Recommendations For versions prior to 0.32.8, update to version 0.32.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of the general composite rect() function until a patch is available.