Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

CVE-2025-6034

There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open...

CVE-2025-6034 Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite

There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open...

CVE-2025-6034

CVE-2025-6034 affects NI Circuit Design Suite (SymbolEditor) where a memory corruption occurs due to an out-of-bounds read in DefaultFontOptions(). The vulnerability may lead to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially crafted .sym fil...

Apple fixes critical font processing bug. Update now!

Apple has released important security updates to address a critical vulnerability in FontParser —the part of MacOS/iOS/iPadOS that processes fonts. Identified as CVE-2025-43400, the flaw was discovered internally by Apple and allows an attacker to craft a malicious font that can cause apps to cra...

PT-2025-40007

Name of the Vulnerable Software and Affected Versions NI Circuit Design Suite versions 14.3.1 and prior Description A memory corruption issue exists due to an out-of-bounds read in the DefaultFontOptions function when using the SymbolEditor within NI Circuit Design Suite. Successful exploitation...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory...

CVE-2025-43400

An out-of-bounds write vulnerability exists in the FontParser component of several Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The root cause is a lack of proper bounds checking when processing a maliciously crafted font . Successful exploitation can lead ...

CVE-2025-43400

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc. in the U.S. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for iPad tablets. apple visionOS is an operating system for AR glasses. A security vulnerability exists in multiple Apple products that...

macOS 26.x < 26.0.1 (125328)

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.0.1. It is, therefore, affected by a vulnerability: - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, macOS Sequoia 15.7.1,...

About the security content of macOS Sonoma 14.8.1

About the security content of macOS Sonoma 14.8.1 This document describes the security content of macOS Sonoma 14.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of iOS 26.0.1 and iPadOS 26.0.1

About the security content of iOS 26.0.1 and iPadOS 26.0.1 This document describes the security content of iOS 26.0.1 and iPadOS 26.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2025-43400: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...

PT-2025-39853

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to Tahoe 26.0.1 Apple iOS versions prior to 26.0.1 Apple iPadOS versions prior to 26.0.1 Apple visionOS version 26.0.1 Apple Sonoma versions prior to 14.8.1 Apple Sequoia versions prior to 15.7.1 Apple watchOS versio...

Malicious code in funny-font-wow (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476f2be479b43f09e5f3955a6404c84db43a4b9a81eee04f4916668d38f4bbfa Any computer that has this package installed or running should be considered...

MAL-2025-47585 Malicious code in funny-font-wow (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476f2be479b43f09e5f3955a6404c84db43a4b9a81eee04f4916668d38f4bbfa Any computer that has this package installed or running should be considered...