291 matches found
PT-2025-7963
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been identified in the Linux kernel, specifically in the ufx usb probe function. This issue occurs when fb alloc cmap fails, leading to a call to fb...
PT-2024-40835 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a negative-size-param, which occurs in the pdf resize resource arrays function, called by process cmap text and...
serenity:FuzzTTF: Heap-buffer-overflow in OpenType::be_u32
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4883320022106112 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzTTF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
OSV-2023-1103 Heap-buffer-overflow in OpenType::be_u32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63777 Crash type: Heap-buffer-overflow READ 1 Crash state: OpenType::beu32 OpenType::Cmap::subtable OpenType::Font::tryloadfromoffset...
serenity:FuzzTTF: Heap-buffer-overflow in OpenType::be_u32
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=4665490011979776 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzTTF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
SUSE CVE-2012-1499
The JPEG 2000 codec jp2.c in OpenJPEG before 1.5 allows remote attackers to execute arbitrary code via a crafted palette index in a CMAP record of a JPEG image, which triggers memory corruption, aka "out-of heap-based buffer write."...
SUSE CVE-2014-9663
The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...
SUSE CVE-2014-9669
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service out-of-bounds read or memory corruption or possibly have unspecified other impact via a crafted cmap SFNT table...
SUSE CVE-2015-7650
Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service...
SUSE CVE-2016-2794
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite...
SUSE CVE-2016-2801
The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted...
SUSE CVE-2018-6412
In the function sbusfbioctlhelper in drivers/video/fbdev/sbuslib.c in the Linux kernel through 4.15, an integer signedness error allows arbitrary information leakage for the FBIOPUTCMAPSPARC and FBIOGETCMAPSPARC commands...
SUSE CVE-2018-1000038
In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...
mupdf:pdf_fuzzer: Stack-buffer-overflow in pdf_map_one_to_many
Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6321306205552640 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fbf89fb0c20...
PT-2022-36788
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided input. Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the function names cmap put ranges, psf write cmap, and pdf...
new packages: adobe-mappings-cmap
An update is available for adobe-mappings-cmap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rock...
PT-2022-36644
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk obj alloc, chunk alloc bytes, and cmap endfbrang...
PT-2022-36640
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves several functions, including general endcidran...
PT-2021-27988
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the TTF::be u16, TTF::Cmap::subtable, and TTF::Font::try load from offset...
serenity:FuzzTTF: Heap-buffer-overflow in TTF::be_u16
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5309037346947072 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzTTF Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...