CVE-2018-19876

cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

• CWE-416

• https://bugs.webkit.org/show_bug.cgi?id=191595Issue Tracking, Patch, Third Party Advisory
• https://gitlab.freedesktop.org/cairo/cairo/merge_requests/5Patch, Third Party Advisory
• https://bugs.webkit.org/show_bug.cgi?id=191595Issue Tracking, Patch, Third Party Advisory
• https://gitlab.freedesktop.org/cairo/cairo/merge_requests/5Patch, Third Party Advisory

Published

Dec 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19869An issue was discovered in Qt before 5.11.3. A malformed SVG…
• CVE-2018-1987IBM Spectrum Protect for Enterprise Resource Planning 7.1 an…7.8
• CVE-2018-19870An issue was discovered in Qt before 5.11.3. A malformed GIF…
• CVE-2018-19871An issue was discovered in Qt before 5.11.3. There is QTgaFi…
• CVE-2018-19872An issue was discovered in Qt 5.11. A malformed PPM image ca…
• CVE-2018-19873An issue was discovered in Qt before 5.11.3. QBmpHandler has…9.8
• CVE-2018-19877login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via th…
• CVE-2018-19878An issue was discovered on Teltonika RTU950 R_31.04.89 devic…
• CVE-2018-19879An issue was discovered in /cgi-bin/luci on Teltonika RTU9XX…7.1
• CVE-2018-19881In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attacke…
• CVE-2018-19882In Artifex MuPDF 1.14.0, the svg_run_image function in svg/s…
• CVE-2018-19886An invalid memory address dereference was discovered in the …5.5