OSV-2023-298

    Dashboard / Vulnerabilities / OSV-2023-298

    OSV-2023-298

    Published: 12 Apr 2023Last Modified: 19 Dec 2025

    Summary: UNKNOWN READ in active_edges

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884 ``` Crash type: UNKNOWN READ Crash state: active_edges intersect _cairo_boxes_intersect ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57884

    Affected packages

    Package

    Name: cairo

    Purl: pkg:generic/cairo

    Affected ranges

    Type: GIT

    Events:

    Introduced- cbcf962da267c519c73dce3cb25afc8c983e1f5b
    Fixed -04656d7450e229622546fd2b11496aa58c44181d

    Affected versions

    1.17.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-298 | CVE-DB