CVE-2013-6425

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

• CWE-191

• http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0cPatch, Third Party Advisory
• http://lists.freedesktop.org/archives/pixman/2013-November/003109.htmlPatch, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00097.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1869.htmlThird Party Advisory
• http://www.debian.org/security/2013/dsa-2823Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/03/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/04/8Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2047-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=67484Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921Issue Tracking, Patch, Third Party Advisory
• http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0cPatch, Third Party Advisory
• http://lists.freedesktop.org/archives/pixman/2013-November/003109.htmlPatch, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00001.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00005.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00008.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00097.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1869.htmlThird Party Advisory
• http://www.debian.org/security/2013/dsa-2823Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/03/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/12/04/8Mailing List, Third Party Advisory
• http://www.ubuntu.com/usn/USN-2047-1Third Party Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=67484Issue Tracking, Patch, Third Party Advisory
• https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921Issue Tracking, Patch, Third Party Advisory

Published

Jan 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6419Interaction error in OpenStack Nova and Neutron before Havan…
• CVE-2013-6420The asn1_time_to_time_t function in ext/openssl/openssl.c in…
• CVE-2013-6421The unpack_zip function in archive_unpacker.rb in the sprout…
• CVE-2013-6422The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when di…
• CVE-2013-6423Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-6424Integer underflow in the xTrapezoidValid macro in render/pic…
• CVE-2013-6426The cloudformation-compatible API in OpenStack Orchestration…
• CVE-2013-6427upgrade.py in the hp-upgrade service in HP Linux Imaging and…
• CVE-2013-6428The ReST API in OpenStack Orchestration API (Heat) before Ha…
• CVE-2013-6429The SourceHttpMessageConverter in Spring MVC in Spring Frame…
• CVE-2013-6430The JavaScriptUtils.javaScriptEscape method in web/util/Java…5.4
• CVE-2013-6431The fib6_add function in net/ipv6/ip6_fib.c in the Linux ker…