---
gem: cairo
cve: 2017-7475
ghsa: 5v3f-73gv-x7x5
url: https://bugs.freedesktop.org/show_bug.cgi?id=100763
date: 2017-11-15
title: cairo NULL pointer dereference
description: |
  Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related
  to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.

cvss_v3: 5.5

patched_versions:
- ">= 1.15.5"