Critical severity9.8NVD Advisory· Published Apr 13, 2016· Updated Jun 17, 2026
CVE-2014-9766
CVE-2014-9766
Description
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Patches
Vulnerability mechanics
References
10- lists.x.org/archives/xorg-announce/2014-July/002452.htmlnvdPatchVendor Advisory
- lists.freedesktop.org/archives/pixman/2014-April/003244.htmlnvdVendor Advisory
- www.debian.org/security/2016/dsa-3525nvd
- www.openwall.com/lists/oss-security/2016/02/24/13nvd
- www.openwall.com/lists/oss-security/2016/02/24/15nvd
- www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlnvd
- www.ubuntu.com/usn/USN-2918-1nvd
- bugs.freedesktop.org/show_bug.cginvd
- bugzilla.redhat.com/show_bug.cginvd
- cgit.freedesktop.org/pixman/commit/nvd
News mentions
0No linked articles in our index yet.