Search for packages
Package details: pkg:deb/debian/graphite2@1.3.10-1
purl pkg:deb/debian/graphite2@1.3.10-1
Next non-vulnerable version 1.3.13-7
Latest non-vulnerable version 1.3.13-7
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-knpp-99q1-aaad
Aliases:
CVE-2018-7999
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
1.3.13-7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (7)
Vulnerability Summary Aliases
VCID-3zgt-xntf-aaaj Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph. CVE-2017-7776
VCID-8vps-3ps6-aaam Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function. CVE-2017-7774
VCID-dqpq-j3j8-aaar Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. CVE-2017-7772
VCID-kr72-9h12-aaar A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2. CVE-2017-7778
VCID-q53r-qdez-aaac Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function. CVE-2017-7771
VCID-qfx4-thz2-aaaf Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function. CVE-2017-7777
VCID-yxvf-6atk-aaan Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. CVE-2017-7773

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T17:25:29.990166+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T16:45:08.076808+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T16:05:28.408844+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:39:57.316030+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:18:06.422552+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:53:45.398759+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:54:44.767790+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:54:00.412360+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T05:48:41.901514+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 36.1.3
2025-06-21T01:24:53.592143+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf None 36.1.3
2025-06-21T01:24:20.306036+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj None 36.1.3
2025-06-21T01:11:44.919394+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar None 36.1.3
2025-06-21T00:30:29.932732+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar None 36.1.3
2025-06-20T23:32:46.955930+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan None 36.1.3
2025-06-20T23:26:54.489978+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad None 36.1.3
2025-06-20T22:06:05.790229+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac None 36.1.3
2025-06-20T20:29:20.934597+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam None 36.1.3
2025-06-08T10:04:58.668870+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T09:30:22.645012+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:58:12.175751+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:34:15.843600+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:12:41.908834+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:48:46.114808+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:06:52.144794+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:06:28.030142+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:47:42.271308+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf None 36.1.0
2025-06-07T18:47:08.098114+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj None 36.1.0
2025-06-07T18:34:24.836098+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar None 36.1.0
2025-06-07T17:53:09.198807+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar None 36.1.0
2025-06-07T16:55:42.447095+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan None 36.1.0
2025-06-07T16:49:49.340695+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad None 36.1.0
2025-06-07T15:29:56.922695+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac None 36.1.0
2025-06-07T14:03:19.551496+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam None 36.1.0
2025-04-12T22:11:50.796209+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:06:19.707343+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T22:02:58.199694+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:16:46.303068+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:26:03.854953+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:12:03.215332+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:09:03.255084+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:56:58.302565+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T08:37:18.510682+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T08:02:48.313350+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:29:48.679069+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T07:05:39.905304+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:44:52.070364+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:20:31.063813+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:37:47.386774+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:37:24.403564+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T17:25:31.951565+00:00 Debian Oval Importer Fixing VCID-qfx4-thz2-aaaf None 36.0.0
2025-04-07T17:24:57.878782+00:00 Debian Oval Importer Fixing VCID-3zgt-xntf-aaaj None 36.0.0
2025-04-07T17:12:08.611690+00:00 Debian Oval Importer Fixing VCID-kr72-9h12-aaar None 36.0.0
2025-04-07T16:29:53.857526+00:00 Debian Oval Importer Fixing VCID-dqpq-j3j8-aaar None 36.0.0
2025-04-07T15:28:43.668479+00:00 Debian Oval Importer Fixing VCID-yxvf-6atk-aaan None 36.0.0
2025-04-07T15:22:34.080177+00:00 Debian Oval Importer Affected by VCID-knpp-99q1-aaad None 36.0.0
2025-04-07T14:01:02.495178+00:00 Debian Oval Importer Fixing VCID-q53r-qdez-aaac None 36.0.0
2025-04-07T12:37:21.857877+00:00 Debian Oval Importer Fixing VCID-8vps-3ps6-aaam None 36.0.0
2025-04-05T03:03:30.434167+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 36.0.0
2025-02-19T04:25:41.580320+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 35.1.0
2024-04-24T13:34:37.590463+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 34.0.0rc4
2024-01-10T16:11:07.338251+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 34.0.0rc2
2024-01-04T06:08:31.551001+00:00 Debian Importer Affected by VCID-knpp-99q1-aaad None 34.0.0rc1