13 matches found
CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
GO-2026-4962 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Parsing a malicious font file can cause excessive memory allocation...
EUVD-2016-2804
Malware in sbrugna...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability of the ByteArray::Get method in the Google Chrome browser component is due to buffer overflow in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other effects using a specially crafted SFNT font...
Google Chrome 'ByteArray::Get' method heap buffer overflow vulnerability
Google Chrome is a web browser developed by Google Google Inc. Google sfntly is one of the font toolkits for using, editing and creating SFNT-based fonts. Google sfntly used in versions of Google Chrome prior to 52.0.2743.82 The 'ByteArray::Get' method in the data/bytearray.cc file in versions...
CVE-2016-1709
Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...
UBUNTU-CVE-2016-1709
Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...
Heap overflow
Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...
CVE-2016-1709
Removed by vendor...
CVE-2016-1709
CVE-2016-1709 describes a heap-buffer-overflow in the ByteArray::Get method of data/byte_array.cc in Google sfntly, affecting Google Chrome prior to 52.0.2743.82 (sfntly used by Chrome). The vulnerability could allow a remote attacker to cause a denial of service or other unspecified impact via a...
CVE-2016-1709
Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...
CVE-2016-1709
Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...