The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::TtfUtil::CmapSubtable4NextCodepoint in browsers Firefox ESR and Firefox, as well as in the Graphite rendering software, is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects through the...