CVE-2025-50422CWE-617
Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c
Low · published August 4, 2025
What it is
Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.
The record
Technical detail
- CVSS v3.1
- 2.9 · LOW
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00224 · 12.3th percentile
- Weakness
- CWE-617 · Reachable Assertion
- Published
- 2025-08-04T00:00Z
EPSS history
Timeline