PatchTheCVEcanvas draw vulnerabilities and fixes
Recent CVEs affecting canvas draw, with upgrade or downgrade steps. 10 tracked.
Also searched as: canvasdraw.
canvas draw has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-02-06. Highest priority: CVE-2018-3981 (score 53/100).
- CVE-2018-3981 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0
- CVE-2018-3980 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0
- CVE-2018-3976 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw
- CVE-2018-3973 HIGH 7.8 DOWNGRADE An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0
- CVE-2018-3871 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0
- CVE-2018-3870 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0
- CVE-2018-3860 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0
- CVE-2018-3859 HIGH 7.8 DOWNGRADE An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0
- CVE-2018-3858 HIGH 7.8 DOWNGRADE An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0
- CVE-2018-3857 HIGH 7.8 DOWNGRADE An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0
FAQ
How do I fix canvas draw vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is canvas draw being exploited right now?
None of the tracked canvas draw CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which canvas draw CVE should I patch first?
CVE-2018-3981 currently ranks highest (53/100): An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0.