Sil Graphite2 vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Sil Graphite2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-7777debianfirefox-esr+6
EPSS score1.20%
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.CVE-2017-7776debianfirefox-esr+6EPSS score2.77%
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.CVE-2017-7778debianfirefox-esr+9EPSS score5.05%
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.CVE-2017-7772debianfirefox-esr+6EPSS score1.42%
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.CVE-2017-7771debianfirefox-esr+6EPSS score1.19%
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.CVE-2017-7774debianfirefox-esr+6EPSS score1.42%
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.CVE-2017-7773debianfirefox-esr+6EPSS score1.42%
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.CVE-2017-5436debianfirefox-esr+24EPSS score2.29%
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.