Mozilla: Integer-overflow led to out-of-bounds-read in the OpenType sanitizer
The Mozilla Foundation Security Advisory describes this flaw as: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font...