CVE-2014-9766: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 5.6% chance of exploitation in the next 30 days.

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only
• Pixman Pixman: up to and including 0.32.5

Published 2016-04-13. Last modified 2026-06-17.