Miggo Logo
Miggo Vulnerability Database
→
CVE-2019-6461

CVE-2019-6461: An issue was discovered in cairo 1.16.0. There is an assertion problem in the function...

6.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2019-6461
GHSA ID
GHSA-pf7q-pwfc-88m3
EPSS Score
0.37051%
CWE
CWE-617
Published
5/13/2022
Updated
2/1/2023
KEV Status
No
Technology
-

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability description (CVE-2019-6461) directly names the affected function '_cairo_arc_in_direction' and the file 'cairo-arc.c'. While I was unable to fetch specific commit details or patch files through the provided URLs (some were inaccessible, others did not link to commits), the description from NVD and GitHub advisories is consistent and specific. The confidence is 'medium' because the analysis relies on the textual description of the vulnerability rather than direct analysis of a code patch. No other functions were mentioned in the available information.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

*n issu* w*s *is*ov*r** in **iro *.**.*. T**r* is *n *ss*rtion pro*l*m in t** *un*tion _**iro_*r*_in_*ir**tion in t** *il* **iro-*r*.*.

Reasoning

T** vuln*r**ility **s*ription (*V*-****-****) *ir**tly n*m*s t** *****t** *un*tion '_**iro_*r*_in_*ir**tion' *n* t** *il* '**iro-*r*.*'. W*il* I w*s un**l* to **t** sp**i*i* *ommit **t*ils or p*t** *il*s t*rou** t** provi*** URLs (som* w*r* in****ssi