Vulnerabilities (CVE)

Filtered by vendor Sil Subscribe
Filtered by product Graphite2
Total 28 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-1523 4 Debian, Fedoraproject, Mozilla and 1 more 5 Debian Linux, Fedora, Firefox and 2 more 2025-04-12 4.3 MEDIUM 6.5 MEDIUM
The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
CVE-2018-7999 1 Sil 1 Graphite2 2024-11-21 6.8 MEDIUM 8.8 HIGH
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
CVE-2017-7777 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 6.8 MEDIUM 8.8 HIGH
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
CVE-2017-7776 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 5.8 MEDIUM 8.1 HIGH
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
CVE-2017-7774 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 6.4 MEDIUM 9.1 CRITICAL
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
CVE-2017-7773 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 6.8 MEDIUM 8.8 HIGH
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
CVE-2017-7772 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 6.8 MEDIUM 8.8 HIGH
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
CVE-2017-7771 2 Mozilla, Sil 2 Firefox, Graphite2 2024-11-21 5.8 MEDIUM 8.1 HIGH
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.