ALBA-2021:4216 xorg-x11-font-utils bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Mozilla Firefox Security Advisory (MFSA2016-37) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfull...

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts Adobe Type 1 PostScript format that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfull...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-30831

CVE-2021-30831 concerns Apple’s FontParser, where processing a maliciously crafted font could cause an out-of-bounds read leading to disclosure of process memory. The connected Apple Watch content explicitly ties this CVE to FontParser and notes the underlying issue as an out-of-bounds read addre...

CVE-2021-30842

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-30843

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-39825 Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

September 27, 2021—KB5005619 (OS Build 20348.261) Preview

None None...

PDFTools null pointer dereference vulnerability

PDFTools is a tool for converting PDF files to ePUB format. A null pointer dereference vulnerability exists in the Font::Size function in font.cpp in PDFTools 20200714 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-39542

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size located in font.cpp. It allows an attacker to cause Denial of Service...

CVE-2021-39542

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size located in font.cpp. It allows an attacker to cause Denial of Service...

CVE-2021-39593

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfFontExtractDefineFontInfo located in swftext.c. It allows an attacker to cause Denial of Service...

CVE-2021-39542

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size located in font.cpp. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39593

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfFontExtractDefineFontInfo located in swftext.c. It allows an attacker to cause Denial of Service...

Null pointer dereference

An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size located in font.cpp. It allows an attacker to cause Denial of Service...