CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:gnome:pango:1.42.3:*:*:*:*:*:*:*
Informations
Vendor
gnomeProduct
pangoVersion
1.42.3Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize. | 9.8 |
Critical |
||
| libpango in Pango 1.40.8 through 1.42.3, as used in hexchat and other products, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted text with invalid Unicode sequences. | 6.5 |
Medium |
2025©
tesweb SA
