Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Mozilla: graphite2: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)

🗓️ 10 Apr 2026 06:59:19Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 2 Views

Out-of-bounds write in Graphite two triggered by a malicious font; fixed in library and Mozilla products.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified
18 Jun 201800:35
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS.
18 Jun 201800:35
–ibm
ALT Linux		Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1
20 Apr 201700:00
–altlinux
ALT Linux		Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1
2 May 201700:00
–altlinux
FreeBSD		mozilla -- multiple vulnerabilities
19 Apr 201700:00
–freebsd
FreeBSD		graphite2 -- out-of-bounds write with malicious font
19 Apr 201700:00
–freebsd
ArchLinux		[ASA-201704-6] firefox: multiple issues
21 Apr 201700:00
–archlinux
BDU FSTEC		The vulnerability in the `FeatureRef::applyValToFeature` function of the Graphite font library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.
22 Dec 202000:00
–bdu_fstec
Tenable Nessus		CentOS 6 : firefox (CESA-2017:1104)
21 Apr 201700:00
–nessus
Tenable Nessus		CentOS 7 : firefox (CESA-2017:1106)
21 Apr 201700:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Hardened Imagesanyaarch64graphite21.3.14-20.1.hum1graphite2-1.3.14-20.1.hum1.aarch64.rpm
Red Hat Hardened Imagesanyx86_64graphite21.3.14-20.1.hum1graphite2-1.3.14-20.1.hum1.x86_64.rpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Jul 2026 17:25Current
7High risk
Vulners AI Score7
CVSS 26.8
CVSS 38.8
EPSS0.02414
Graphite twoout of boundsmalicious fontfixedMozilla productsThunderbirdFirefox extended supportFirefox
2