cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an applicati…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 5, 2018 · NIST NVD

   Detected

   cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

2. Jun 17, 2026 · NIST NVD

   Updated

   cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

3. Oct 15, 2026 · NIST NVD

   Updated

   cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

Affected

• cpe cairographics/cairo1.16.0

Sources

• CVE.orgVulnerability recordCVE-2018-19876

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-19876

  cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

  nvd.nist.gov

References

• Issue Tracking · bugs.webkit.org
• Patch · gitlab.freedesktop.org