The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the TrueTypeScaler component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted font file...

graphite2: Null pointer dereference and out-of-bounds access vulnerabilities

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

graphite2: Heap-based buffer overflow in context item handling functionality

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup

A vulnerability has been discovered in Graphite2. An attacker able to trick an unsuspecting user into opening specially crafted font files in an application using Graphite2 could exploit these flaws to cause the application to crash or, potentially, execute arbitrary code with the privileges of t...

HiFont - Cool Font Text Free - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application HiFont - Cool Font Text Free published at the 'play' market has multiple vulnerabilities...

Best Font—text on photo - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Best Font—text on photo published at the 'play' market has multiple vulnerabilities...

Font Studio- Photo Texts Image - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Font Studio- Photo Texts Image published at the 'play' market has multiple vulnerabilities...

Font Style Search for Galaxy - Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Font Style Search for Galaxy published at the 'play' market has multiple vulnerabilities...

Cute Font font #1 - Solo Font - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Cute Font font 1 - Solo Font published at the 'play' market has multiple vulnerabilities...

Font Pack - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Font Pack published at the 'play' market has multiple vulnerabilities...

Updated thunderbird/thunderbird-l10n packages fix security vulnerability

Disables the Graphite2 font shaping library due to security issues...

MGASA-2016-0129 Updated thunderbird/thunderbird-l10n packages fix security vulnerability

Disables the Graphite2 font shaping library due to security issues...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::Slot::getAttr function Slot.cpp in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects through a...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the CachedCmap.cpp component in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects through the use of a speciall...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the getCoverageFormat12 function in the CmapCoverage.cpp library of the Minikin operating system in Android is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker acting locally to trigger a service failure long-term reboot through an...

The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::vm::Machine::Code::Code function in browsers Firefox ESR and Firefox, as well as in the Graphite 2 rendering software, is caused by a buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service interruptions or other...

The vulnerability of the Graphite 2 rendering software allows a perpetrator to trigger a service failure or cause other adverse effects.

The vulnerability of the graphite2::TtfUtil::GetTableInfo function in the Graphite rendering software does not initialize memory for special data structures. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects using a specially created Graphite sma...

The vulnerability of the Graphite 2 rendering software, as well as the Firefox and Firefox ESR browsers, allows a perpetrator to trigger a service failure or exert other effects.

The vulnerability of the setAttr function in the Graphite rendering software for browsers Firefox and Firefox ESR is caused by buffer overflow. Exploiting this vulnerability allows an attacker to cause service interruptions or other effects such as memory corruption through a specially created...

openSUSE Security Update : MozillaThunderbird (openSUSE-2016-402)

MozillaThunderbird was updated to 38.7.0 to fix the following issues : - Update to Thunderbird 38.7.0 boo969894 - MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback - MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and...

Security update for MozillaThunderbird (important)

MozillaThunderbird was updated to 38.7.0 to fix the following issues: Update to Thunderbird 38.7.0 boo969894 MFSA 2015-81/CVE-2015-4477 bmo1179484 Use-after-free in MediaStream playback MFSA 2015-136/CVE-2015-7207 bmo1185256 Same-origin policy violation using performance.getEntries and history...