What’s Vulnerable › Vulnerabilities

CVE-2014-5116

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-07-29 · updated 2026-06-17

Description

The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.

Affected products

• Red Hat, Inc. Cairo: 1.10.2

References

• http://www.exploit-db.com/exploits/33384
• http://www.osvdb.org/107083
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761
• http://www.exploit-db.com/exploits/33384
• http://www.osvdb.org/107083
• https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761

Get alerted when CVE-2014-5116 or the next vulnerability affects your stack