RSS   Podatności dla 'Graphite2'   RSS

2019-04-15
 
CVE-2017-7777

CWE-119
 
 
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.

 
 
CVE-2017-7776

CWE-125
 
 
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.

 
 
CVE-2017-7774

CWE-125
 
 
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.

 
 
CVE-2017-7773

CWE-119
 
 
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.

 
 
CVE-2017-7771

CWE-125
 
 
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.

 
2019-04-12
 
CVE-2017-7772

CWE-119
 
 
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.

 
2018-06-11
 
CVE-2017-7778

CWE-787
 
 
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

 
 
CVE-2017-5436

CWE-787
 
 
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

 
2018-03-09
 
CVE-2018-7999

CWE-476
 
 
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.

 
2016-03-13
 
CVE-2016-2802

CWE-119
 
 
The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

 

Copyright 2024, cxsecurity.com

 

Back to Top