CVE-2014-9766: Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote a...

Security readout for executives and security teams

CVE-2014-9766 is an integer overflow in Pixman, a low-level graphics library. A crafted input that drives very large image dimensions could crash an application and may allow code execution. The sources identify Pixman before 0.32.6 as affected. There is no KEV listing or cited evidence of active exploitation. Exposure is most likely where Pixman before 0.32.6 remains installed through OS packages or embedded graphics stacks. Systems processing untrusted rendering content are the priority to review. The bundle does not provide complete downstream affected-version ranges beyond vendor advisories. Treat this as a patch hygiene issue with potentially serious impact in legacy graphics stacks. It is not supported by evidence of active exploitation in the supplied sources, but code-execution possibility means internet-facing or untrusted-content rendering paths should be remediated promptly. Mitigation focus: Upgrade Pixman to 0.32.6 or a vendor-fixed package.; Check Ubuntu, Debian, Oracle, and applicable vendor advisories for fixed package versions.; Prioritize systems that render or transform untrusted image or graphics content..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.