234 matches found
CVE-2026-84524
An out-of-bounds read vulnerability exists in the FontParser component of Apple products. Processing a maliciously crafted font file may result in unexpected app termination . This issue has been addressed with improved bounds checking. Affected systems include iOS 26.7 , iPadOS 26.7 , iOS 27 , i...
PT-2026-91588
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...
SUSE CVE-2026-71394
GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...
CVE-2026-71393
A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an improper overflow checking. This can cause an undersized heap allocation and subsequently a heap-based buffer overflow,...
CVE-2026-71393
GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font causes the calculation to wrap, resulting in a...
python-pillow: Pillow: Denial of Service via crafted BDF font file
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted BDF font file. The library's image processing function fails to properly validate dimensions from the font file, bypassing a critical...
Astra Linux – Vulnerability in Chromium
Integer overflow in PDFium in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted font file. Chromium security severity: High...
xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow
A flaw was found in the glamorfontget function of the xorg-x11-server. This vulnerability, a heap buffer overflow, occurs when the server processes a specially crafted PCF font file where individual glyph metrics exceed the declared maximum bounds. An authenticated X client can exploit this by...
CVE-2026-9960
An integer overflow in the PDFium component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.216 allows a remote attacker who has already compromised the renderer process to execute arbitrary code inside a sandbox. This attack is triggered via a specially crafted font file . In ...
CVE-2026-9960
Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted font file. Chromium security severity: High...
CVE-2026-9960
Integer overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted font file. Chromium security severity: High...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a security vulnerability caused by PDFium integer overflow. This vulnerability could allow remote attackers with access to the renderer process to execute arbitrary code in a sandbo...
CVE-2020-37011
Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...
EUVD-2018-19711
Malware in sbrugna...
EUVD-2010-2524
Malware in sbrugna...
EUVD-2015-5707
Malware in sbrugna...
EUVD-2015-5888
Malware in sbrugna...
EUVD-2015-6923
Malware in sbrugna...