PA
Product
Pango
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add Pango to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1010238 | 9.8 | Jul 19 | Gnome Pango 1.42 and later is affected by: Buffer Overflow Affected: 1.42.0 through 1.44 |
| CVE-2018-15120 | 6.5 | Aug 24 | libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have… Affected: 1.40.8 through 1.42.3 |
| CVE-2011-3193 | – | Jun 16 | Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a… Affected: before 1.25.1 |
| CVE-2011-0064 | – | Mar 7 | The hb_buffer_ensure function in hb-buffer.c in HarfBuzz, as used in Pango 1.28.3, Firefox, and other products, does not verify that memory reallocations succeed, which allows… Affected: 1.28.3 |
| CVE-2011-0020 | – | Jan 24 | Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is… Affected: through 1.28.3; 1.28.0; 1.28.1; 1.28.2 |
| CVE-2010-0421 | – | Mar 18 | Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of… Affected: through 1.27 |
Showing 6