The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.

The vulnerability of the graphite2::GlyphCache::glyph function in Firefox ESR and Firefox browsers is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects using a specially created Graphite smart font...