Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2016-1522

graphite2: Null pointer dereference and out-of-bounds access vulnerabilities

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 8.3% KEV · Not listed
Vendors
Debian Fedoraproject Mozilla and 2 more
Products
Debian Linux Fedora Firefox and 3 more
CVE-2018-7999

graphite2: NULL pointer dereference in Segment.cpp in libgraphite2

In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Sil
Products
Graphite2
CVE-2017-7777

graphite2: use of uninitialized memory "graphite2::GlyphCache::Loader::read_glyph"

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Mozilla Redhat Sil
Products
Firefox Enterprise Linux Graphite2