CVE-2013-1591

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

• CWE-190

• http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943fMailing List, Patch
• http://rhn.redhat.com/errata/RHSA-2013-0687.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0746.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:116Broken Link
• http://www.palemoon.org/releasenotes-ng.shtmlBroken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=910149Exploit, Issue Tracking, Patch
• https://support.f5.com/csp/article/K51392553Third Party Advisory
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077Third Party Advisory
• http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943fMailing List, Patch
• http://rhn.redhat.com/errata/RHSA-2013-0687.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0746.htmlThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:116Broken Link
• http://www.palemoon.org/releasenotes-ng.shtmlBroken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=910149Exploit, Issue Tracking, Patch
• https://support.f5.com/csp/article/K51392553Third Party Advisory
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077Third Party Advisory

Published

Jan 31, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1585epan/tvbuff.c in Wireshark 1.6.x before 1.6.13 and 1.8.x bef…
• CVE-2013-1586The fragment_set_tot_len function in epan/reassemble.c in Wi…
• CVE-2013-1587The dissect_rohc_ir_packet function in epan/dissectors/packe…
• CVE-2013-1588Multiple buffer overflows in the dissect_pft_fec_detailed fu…
• CVE-2013-1589Double free vulnerability in epan/proto.c in the dissection …
• CVE-2013-1590Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x …
• CVE-2013-1592A Buffer Overflow vulnerability exists in the Message Server…9.8
• CVE-2013-1593A Denial of Service vulnerability exists in the WRITE_C func…7.5
• CVE-2013-1594An Information Disclosure vulnerability exists via a GET req…7.5
• CVE-2013-1595A Buffer Overflow vulnerability exists in Vivotek PT7135 IP …9.8
• CVE-2013-1596An Authentication Bypass Vulnerability exists in Vivotek PT7…5.3
• CVE-2013-1597A Directory Traversal vulnerability exists in Vivotek PT7135…6.5