● CVE — Critical
CVE-2019-1010238
Vendordebian, fedoraproject, canonical, redhat, gnomeProductdebian linux, fedora, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, openshift container platform, enterprise linux desktop, enterprise linux workstation, pango, sd-wan edgeDiscoveredJul 19, 2019UpdatedNov 21, 2024
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.