← All advisories

Medium severity5.5NVD Advisory· Published May 19, 2017· Updated Jun 17, 2026

CVE-2017-7475

CVE-2017-7475

Description

Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
cairoRubyGems	>= 1.15.4, < 1.15.5	1.15.5

Affected products

11

Cairographics/Cairo
cpe:2.3:a:cairographics:cairo:1.15.4:*:*:*:*:*:*:*
ghsa-coords9 versions
pkg:gem/cairo pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/cairo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
>= 1.15.4, < 1.15.5+ 8 more
- (no CPE)range: >= 1.15.4, < 1.15.5
- (no CPE)range: < 1.15.2-24.1
- (no CPE)range: < 1.8.8-2.3.7.1
- (no CPE)range: < 1.15.2-24.1
- (no CPE)range: < 1.15.2-24.1
- (no CPE)range: < 1.8.8-2.3.7.1
- (no CPE)range: < 1.15.2-24.1
- (no CPE)range: < 1.8.8-2.3.7.1
- (no CPE)range: < 1.15.2-24.1
Red Hat/Cairov5
Range: 1.15.4

Patches

Vulnerability mechanics

References

8

bugs.freedesktop.org/show_bug.cginvdIssue TrackingPatchThird Party AdvisoryWEB
seclists.org/oss-sec/2017/q2/151nvdMailing ListThird Party AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-5v3f-73gv-x7x5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-7475ghsaADVISORY
github.com/rubysec/ruby-advisory-db/blob/master/gems/cairo/CVE-2017-7475.ymlghsaWEB
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3EghsaWEB
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3Envd

News mentions

0

No linked articles in our index yet.