CVE-2017-5436

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox...

Graphite 2 DoS

The vulnerability of the setAttr function in the Graphite rendering software for browsers Firefox and Firefox ESR is caused by buffer overflow. Exploiting this vulnerability allows an attacker to cause service interruptions or other effects such as memory corruption through a specially created...