CVE-2025-50422: Cairographics Cairo

Low severity, CVSS 2.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

Affected products

• Cairographics Cairo: up to and including 1.18.4

Published 2025-08-04. Last modified 2026-06-17.