pixman records

6 published records for vendor pixman.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 83.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2014-9766No exploit	Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of serpixman · pixman · CWE-189 pre-auth RCE	Critical9.8	—	5.6%	Apr 13, 2016
39Monitor	CVE-2015-5297No exploit	An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8.pixman · pixman · CWE-190 pre-auth RCE Memory safety	Critical9.8	—	1.5%	Jul 31, 2019
35Monitor	CVE-2022-44638No exploit	In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integepixman · pixman · CWE-190 Pre-auth Memory safety	High8.8	—	1.5%	Nov 3, 2022
26Monitor	CVE-2023-37769No exploit	stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.pixman · pixman · CWE-369 Pre-auth Denial of service	Medium6.5	—	0.6%	Jul 17, 2023
21Monitor	CVE-2013-6425No exploit	Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows contextpixman · pixman · CWE-191 Pre-auth Memory safety Denial of service	Medium5.0	—	2.9%	Jan 18, 2014
21Monitor	CVE-2013-6424No exploit	Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service pixman · pixman · CWE-191 Pre-auth Memory safety Denial of service	Medium5.0	—	2.9%	Jan 18, 2014

CVE-2014-9766
41Plan
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of ser
CriticalCVSS 9.8No exploitEPSS 6%
- pre-auth RCE
pixman · pixmanApr 13, 2016
CVE-2015-5297
39Monitor
An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
pixman · pixmanJul 31, 2019
CVE-2022-44638
35Monitor
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an intege
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- Memory safety
pixman · pixmanNov 3, 2022
CVE-2023-37769
26Monitor
stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Denial of service
pixman · pixmanJul 17, 2023
CVE-2013-6425
21Monitor
Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context
MediumCVSS 5.0No exploitEPSS 3%
pixman · pixmanJan 18, 2014
CVE-2013-6424
21Monitor
Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service
MediumCVSS 5.0No exploitEPSS 3%
pixman · pixmanJan 18, 2014