CVE-2022-44638
Fixed in a distro release EPSS 2%CVSS 8.8
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
Products: pixman, debian_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | pixman | 0.38.4-3.el8_9 |
| AlmaLinux 8 | pixman-devel | 0.38.4-3.el8_9 |
| AlmaLinux 9 | mingw32-pixman | 0.42.2-3.el9 |
| AlmaLinux 9 | mingw64-pixman | 0.42.2-3.el9 |
| AlmaLinux 9 | pixman | 0.40.0-6.el9_3 |
| AlmaLinux 9 | pixman-devel | 0.40.0-6.el9_3 |
| Alpine 3.13 | pixman | 0.40.0-r3 |
| Alpine 3.14 | pixman | 0.40.0-r3 |
| Alpine 3.15 | pixman | 0.40.0-r4 |
| Alpine 3.16 | pixman | 0.40.0-r4 |
| Amazon Linux 2 | pixman | 0.34.0-1.amzn2.0.3 |
| Amazon Linux 2 | pixman-devel | 0.34.0-1.amzn2.0.3 |
| Debian 10 | pixman | 0.36.0-1+deb10u1 |
| Debian 11 | pixman | 0.40.0-1.1~deb11u1 |
| Debian 12 | pixman | 0.40.0-1.1 |
| Debian 13 | pixman | 0.40.0-1.1 |
| Debian 14 | pixman | 0.40.0-1.1 |
| Red Hat Enterprise Linux 8 | pixman | 0:0.38.4-3.el8_9 |
| Red Hat Enterprise Linux 8 | pixman-debuginfo | 0:0.38.4-3.el8_9 |
| Red Hat Enterprise Linux 8 | pixman-debugsource | 0:0.38.4-3.el8_9 |
| Red Hat Enterprise Linux 8 | pixman-devel | 0:0.38.4-3.el8_9 |
| Red Hat Enterprise Linux 9 | mingw-pixman | 0:0.42.2-3.el9 |
| Red Hat Enterprise Linux 9 | mingw32-pixman | 0:0.42.2-3.el9 |
| Red Hat Enterprise Linux 9 | mingw32-pixman-debuginfo | 0:0.42.2-3.el9 |
| Red Hat Enterprise Linux 9 | mingw64-pixman | 0:0.42.2-3.el9 |
| Red Hat Enterprise Linux 9 | mingw64-pixman-debuginfo | 0:0.42.2-3.el9 |
| Red Hat Enterprise Linux 9 | pixman | 0:0.40.0-6.el9_3 |
| Red Hat Enterprise Linux 9 | pixman-debuginfo | 0:0.40.0-6.el9_3 |
| Red Hat Enterprise Linux 9 | pixman-debugsource | 0:0.40.0-6.el9_3 |
| Red Hat Enterprise Linux 9 | pixman-devel | 0:0.40.0-6.el9_3 |
| Red Hat rhel eus 8.6 | pixman | 0:0.38.4-3.el8_6 |
| Red Hat rhel eus 8.6 | pixman-debuginfo | 0:0.38.4-3.el8_6 |
| Red Hat rhel eus 8.6 | pixman-debugsource | 0:0.38.4-3.el8_6 |
| Red Hat rhel eus 8.6 | pixman-devel | 0:0.38.4-3.el8_6 |
| Red Hat rhel eus 8.8 | pixman | 0:0.38.4-3.el8_8 |
| Red Hat rhel eus 8.8 | pixman-debuginfo | 0:0.38.4-3.el8_8 |
| Red Hat rhel eus 8.8 | pixman-debugsource | 0:0.38.4-3.el8_8 |
| Red Hat rhel eus 8.8 | pixman-devel | 0:0.38.4-3.el8_8 |
| Red Hat rhel eus 9.0 | pixman | 0:0.40.0-6.el9_0 |
| Red Hat rhel eus 9.0 | pixman-debuginfo | 0:0.40.0-6.el9_0 |
| Red Hat rhel eus 9.0 | pixman-debugsource | 0:0.40.0-6.el9_0 |
| Red Hat rhel eus 9.0 | pixman-devel | 0:0.40.0-6.el9_0 |
| Red Hat rhel eus 9.2 | pixman | 0:0.40.0-6.el9_2 |
| Red Hat rhel eus 9.2 | pixman-debuginfo | 0:0.40.0-6.el9_2 |
| Red Hat rhel eus 9.2 | pixman-debugsource | 0:0.40.0-6.el9_2 |
| Red Hat rhel eus 9.2 | pixman-devel | 0:0.40.0-6.el9_2 |
| Rocky Linux 9 | mingw-pixman | 0:0.42.2-3.el9 |
| Rocky Linux 9 | pixman | 0:0.40.0-6.el9_3 |
| SUSE Enterprise Storage 6 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Enterprise Storage 7 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Micro 5.1 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Micro 5.2 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Micro 5.3 | pixman | 0.40.0-150400.3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | pixman | 0.40.0-150400.3.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | pixman | 0.40.0-150400.3.3.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server 12 SP4-LTSS | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server 15-LTSS | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | pixman | 0.34.0-8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | pixman | 0.34.0-8.3.1 |
| SUSE Manager Proxy 4.1 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Manager Retail Branch Server 4.1 | pixman | 0.34.0-150000.7.5.1 |
| SUSE Manager Server 4.1 | pixman | 0.34.0-150000.7.5.1 |
| SUSE OpenStack Cloud 9 | pixman | 0.34.0-8.3.1 |
| SUSE OpenStack Cloud Crowbar 9 | pixman | 0.34.0-8.3.1 |
| Ubuntu 18.04 LTS | pixman | 0.34.0-2ubuntu0.1 |
| Ubuntu 20.04 LTS | pixman | 0.38.4-0ubuntu2.1 |
| Ubuntu 22.04 LTS | pixman | 0.40.0-1ubuntu0.22.04.1 |
| Ubuntu Pro 14.04 LTS | pixman | 0.30.2-2ubuntu1.2+esm1 |
| Ubuntu Pro 16.04 LTS | pixman | 0.33.6-1ubuntu0.1~esm1 |
| openSUSE Leap 15.3 | pixman | 0.34.0-150000.7.5.1 |
| openSUSE Leap 15.4 | pixman | 0.40.0-150400.3.3.1 |
| openSUSE Leap Micro 5.2 | pixman | 0.34.0-150000.7.5.1 |
| openSUSE Leap Micro 5.3 | pixman | 0.40.0-150400.3.3.1 |