[{"CVE":"CVE-2020-12825","severity":"moderate","public_date":"2020-05-12T00:00:00Z","advisories":["RHSA-2020:3654","RHBA-2020:3609","RHSA-2020:4072"],"bugzilla":"1835377","bugzilla_description":"CVE-2020-12825 libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-674->CWE-121","affected_packages":["redhat-coreos-43.82.202009181853.0","libcroco-0:0.6.12-4.el8_2.1","libcroco-0:0.6.12-6.el7_9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12825.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cvss3_score":"7.1"},{"CVE":"CVE-2017-8834","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463306","bugzilla_description":"CVE-2017-8834 libcroco: Memory allocation failure in the cr_tknzr_parse_comment function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8834.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-8871","severity":"low","public_date":"2017-06-07T00:00:00Z","advisories":[],"bugzilla":"1463307","bugzilla_description":"CVE-2017-8871 libcroco: Infinite loop in the cr_parser_parse_selector_core function","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8871.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7960","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1445314","bugzilla_description":"CVE-2017-7960 libcroco: Out-of-bounds read due to missing index check in cr-input.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7960.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-7961","severity":"low","public_date":"2017-04-16T00:00:00Z","advisories":[],"bugzilla":"1450068","bugzilla_description":"CVE-2017-7961 libcroco: Undefined behavior issue in cr_tknzr_parse_rgb function","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7961.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"}]