CVE-2014-9766

Critical

Published: 13/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before version 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.

Risk Assessment

This vulnerability can lead to application crashes, affecting service availability. There is also a risk of arbitrary code execution, which may compromise system security.

Recommendation

It is recommended to update Pixman to version 0.32.6 or later to mitigate this vulnerability.

Original NVD description (English source)

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.