PT-2021-27988

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the TTF::be u16, TTF::Cmap::subtable, and TTF::Font::try load from offset...

WS-2021-0504

In Serenity, there is Heap-buffer-overflow in TTF::beu16...

serenity:FuzzTTF: Heap-buffer-overflow in TTF::be_u16

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5309037346947072 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzTTF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

imagemagick:encoder_ttf_fuzzer: Crash in parse_charstrings

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4841139786612736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderttffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: UNKNOWN Crash Address:...

CVE-2021-39825

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2021-39825

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

Cross site scripting

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2021-39825 Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2021-39825: Out-of-bounds Write

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

PT-2021-5113

Name of the Vulnerable Software and Affected Versions Adobe Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. This can...

imagemagick:ping_ttf_fuzzer: Heap-buffer-overflow in tt_skip_pdffont_random_tag

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5365043533840384 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: pingttffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

Apple macOS libFontParser TTF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

woff2:convert_woff2ttf_fuzzer: Dynamic-stack-buffer-overflow in void std::__1::sort<woff2::Table>

Project: https://github.com/google/woff2.git Detailed Report: https://oss-fuzz.com/testcase?key=4559549892788224 Project: woff2 Fuzzing Engine: afl Fuzz Target: convertwoff2ttffuzzer Job Type: aflasanwoff2 Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 8 Crash Address:...

CVE-2021-21101 Adobe Illustrator TTF font parsing out-of-bounds write vulnerability could lead to remote code execution

Adobe Illustrator version 25.2 and earlier is affected by an Out-of-bounds Write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue...

Apple macOS CoreText TTF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing o...

imagemagick:encoder_ttf_fuzzer: Use-of-uninitialized-value in ps_check_extra_glyph_name

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6105224696692736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderttffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

CVE-2021-21095 Adobe Bridge TTF Font Parsing Out-Of-Bounds Write vulnerability could lead to arbitrary code execution

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of...

Adobe Bridge TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

Adobe Bridge 11.x < 11.0.1 Multiple Vulnerabilities (APSB21-07)

The version of Adobe Bridge installed on the remote Windows host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-07 advisory. - Adobe Bridge version 11.0 and earlier is affected by an out-of-bounds write vulnerability when parsing TTF files...