CVE-2015-5297CWE-190

An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8

Medium · published July 31, 2019

CVSS v3.0
6.7
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01488 · 73.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2019-07-31T22:03Z
EPSS history
Timeline
  • 31 JUL 22:03Z
    An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8
    cvelistv5