Medium severity6.5NVD Advisory· Published Dec 5, 2018· Updated Jun 17, 2026
CVE-2018-19876
CVE-2018-19876
Description
cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3= 1.16.0+ 2 more
- (no CPE)range: = 1.16.0
- cpe:2.3:a:cairographics:cairo:1.16.0:*:*:*:*:*:*:*
- (no CPE)range: =1.16.0
Patches
Vulnerability mechanics
References
2- bugs.webkit.org/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- gitlab.freedesktop.org/cairo/cairo/merge_requests/5nvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.