cairo is vulnerable to denial of service due to a null pointer dereference (GHSA-5v3f-73gv-x7x5)
Published: 2017-11-15T20:41:14Z
Aliases: CVE-2017-7475
Severity: MODERATE · CWE: CWE-476

Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the `FT_Load_Glyph` and `FT_Render_Glyph` resulting in an application crash.

Affected packages:
package: ecosystem: RubyGems
name: cairo
ranges: type: ECOSYSTEM
events: introduced: 1.15.4
fixed: 1.15.5
versions: 1.15.4