Lucene search
K

12 matches found

RedHat Linux
RedHat Linux
added 2026/02/11 5:48 p.m.6 views

kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling

A flaw was found in the Linux kernel. A local attacker can exploit this vulnerability by providing a specially crafted font glyph index to the bitblit component. This can lead to an out-of-bounds read, potentially resulting in information disclosure or a denial of service...

5.8AI score0.00168EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/02/11 12:25 a.m.7 views

kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling

A flaw was found in the Linux kernel. A local attacker can exploit this vulnerability by providing a specially crafted font glyph index to the bitblit component. This can lead to an out-of-bounds read, potentially resulting in information disclosure or a denial of service...

5.8AI score0.00168EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.3 views

SUSE CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS7.8AI score0.03813EPSS
Exploits0References9
NVD
NVD
added 2012/04/25 10:10 a.m.14 views

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS7.6AI score0.03813EPSS
Exploits0References23
OSV
OSV
added 2012/04/25 10:10 a.m.6 views

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

7.7AI score
Exploits0References23
Prion
Prion
added 2012/04/25 10:10 a.m.13 views

Memory corruption

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS8.3AI score0.03813EPSS
Exploits0References23Affected Software2
Debian CVE
Debian CVE
added 2012/04/25 10:0 a.m.24 views

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS7.7AI score0.03813EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2012/04/10 7:54 p.m.4 views

freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS6.2AI score0.03813EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2012/03/07 12:0 a.m.18 views

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid stack read operation and memory corruption or possibly execute arbitrary code via crafted glyph data in a BDF font...

9.3CVSS6.2AI score0.03813EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2012/03/07 12:0 a.m.20 views

CVE-2012-1136

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODI...

9.3CVSS6AI score0.03813EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2012/03/07 12:0 a.m.20 views

CVE-2012-1127

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font...

9.3CVSS6AI score0.03813EPSS
Exploits0References2
NVD
NVD
added 2009/03/25 11:30 p.m.23 views

CVE-2009-1099

Integer signedness error in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and...

7.5CVSS7.9AI score0.06132EPSS
Exploits0References34
Rows per page
Query Builder