Search for packages
| purl | pkg:deb/debian/graphite2@1.3.10-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-czwf-6b9h-uucu
Aliases: CVE-2018-7999 |
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-347w-5rsv-tugs | Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. |
CVE-2017-7773
|
| VCID-3cp3-cxzm-17bt | Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph. |
CVE-2017-7776
|
| VCID-4u3g-ucaz-pkfd | Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function. |
CVE-2017-7777
|
| VCID-cfr5-npdq-j3fm | Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function. |
CVE-2017-7771
|
| VCID-m5ne-1n7g-8ka3 | Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. |
CVE-2017-7772
|
| VCID-mbbs-34nc-gyb4 | A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. |
CVE-2017-7778
|
| VCID-stvs-mzq6-27ef | Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function. |
CVE-2017-7774
|