Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-6461

23
FAUCET Score

CVE-2019-6461 is an assertion problem in the _cairo_arc_in_direction function within the cairo graphics library, specifically affecting version 1.16.0. This vulnerability has a CVSS v3.1 score of 6.5 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and leading to high availability impact (denial of service). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
1.16.0CPE matchmatch criteria
cpe:2.3:a:cairographics:cairo:1.16.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.12%
Probability of exploitation in next 30 days
EPSS Percentile
79.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0212 is in the 90th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

microsoftpatch availablevia msrc
Product: cm1 cairo 1.17.4-1 on CBL Mariner 1.0Fixed in: 1.17.4-1
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 1.17.4-1
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 1.17.4-1
microsoftpatch availablevia msrc
Product: 17070-16820Fixed in: 1.17.4-1
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: mingw-cairo
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: cairo
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: cairo

Vendor Advisories (3)

microsoft2020-Aug/CVE-2019-6461

CVE-2019-6461

Aug 11, 2020
redhatCVE-2019-6461Moderate

cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

Jan 11, 2019
microsoft2019-Jan/CVE-2019-6461Moderate

An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.

Jan 8, 2019

References

github.com / TeamSeri0us/pocs/tree/master/gerbv
Not Applicable
gitlab.freedesktop.org / cairo/cairo/issues/352
ExploitThird Party Advisory
lists.apache.org / thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E