CVE-2013-6425
No CVSS score yet. EPSS 2.9% chance of exploitation in the next 30 days.
Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-191
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- opensuse:opensuse
- pixman:pixman
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation
References
- http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0c
- http://lists.freedesktop.org/archives/pixman/2013-November/003109.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00001.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00008.html