{ "cveId": "CVE-2025-50422", "url": "https://patchblox.com/security/cve/CVE-2025-50422", "summary": "CVE-2025-50422 is fixed in 9 products on 1 platform, first by ALAS2023-2025-1172, released August 27, 2025. It is not reported as exploited. Patch Radar priority: Routine.", "title": "Cairo through 1.18.4, as used in Poppler through 25.08.0, has an \u0022unscaled-\u003Eface == NULL\u0022 assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.", "description": "This update for cairo fixes the following issues:\n\n- CVE-2025-50422: Fixed Poppler crash on malformed input (bsc#1247589)\n\n- Update to version 1.18.4:\n \u002B The dependency on LZO has been made optional through a build\n time configuration toggle.\n \u002B You can build Cairo against a Freetype installation that does\n not have the FT_Color type.\n \u002B Cairo tests now build on Solaris 11.4 with GCC 14.\n \u002B The DirectWrite backend now builds on MINGW 11.\n \u002B The DirectWrite backend now supports font variations and proper\n glyph coverage.\n- Use tarball in lieu of source service due to freedesktop gitlab\n migration, will switch back at next release at the latest.\n- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build\n lzo2 support feature.\n\n- Convert to source service: allows for easier upgrades by the\n GNOME team.\n\n- Update to version 1.18.2:\n \u002B The malloc-stats code has been removed from the tests directory\n \u002B Cairo now requires a version of pixman equal to, or newer than,\n 0.40.\n \u002B There have been multiple build fixes for newer versions of GCC\n for MSVC; for Solaris; and on macOS 10.7.\n \u002B PNG errors caused by loading malformed data are correctly\n propagated to callers, so they can handle the case.\n \u002B Both stroke and fill colors are now set when showing glyphs on\n a PDF surface.\n \u002B All the font options are copied when creating a fallback font\n object.\n \u002B When drawing text on macOS, Cairo now tries harder to select\n the appropriate font name.\n \u002B Cairo now prefers the COLRv1 table inside a font, if one is\n available.\n \u002B Cairo requires a C11 toolchain when building.", "published": "2025-08-27T17:47:00Z", "severity": "Low", "cvss": 2.9, "cwe": "Reachable Assertion", "epss": 0.00255, "epssPercentile": 0.17201, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50422", "fixes": [ { "platform": "linux", "product": "cairo", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo", "release": "opensuse-leap 15.6", "fixedVersion": "1.18.4-150600.3.3.1", "fix": "SUSE-SU-2025:03449-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03449-1", "released": "2025-10-02T07:15:18Z" }, { "platform": "linux", "product": "cairo", "release": "sles 15.6", "fixedVersion": "1.18.4-150600.3.3.1", "fix": "SUSE-SU-2025:03449-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03449-1", "released": "2025-10-02T07:15:18Z" }, { "platform": "linux", "product": "cairo", "release": "sles 15.7", "fixedVersion": "1.18.4-150600.3.3.1", "fix": "SUSE-SU-2025:03449-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03449-1", "released": "2025-10-02T07:15:18Z" }, { "platform": "linux", "product": "cairo-debuginfo", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-debugsource", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-devel", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-gobject", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-gobject-debuginfo", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-gobject-devel", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-tools", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" }, { "platform": "linux", "product": "cairo-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1.18.0-4.amzn2023.0.3", "fix": "ALAS2023-2025-1172", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1172", "released": "2025-08-27T17:47:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }