All errata/sisyphus_mipsel/ALT-PU-2022-6921-1
ALT-PU-2022-6921-1

Package update libpixman in branch sisyphus_mipsel

Version0.42.2-alt1
Task#0
Published2022-11-05
Max severityHIGH
Severity:

Closed issues (2)

BDU:2022-06667
HIGH8.8

Уязвимость функции rasterize_edges_8 библиотеки Pixman, позволяющая нарушителю выполнить произвольный код

Published: 2022-11-09Modified: 2025-11-19
CVSS 3.xHIGH 8.8
CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
References
CVE-2022-44638
HIGH8.8

In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.

Published: 2022-11-03Modified: 2025-05-02
CVSS 3.xHIGH 8.8
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References