Graphite2 - GlyphCache::GlyphCache Heap Buffer Overflow

Graphite2 - GlyphCache::GlyphCache Heap Buffer Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=749 The following crash due to a heap-based buffer overflow can be observed in a slightly modified ASAN build of the standard Graphite2 gr2FontTest utility git trunk, triggere...

Graphite2 - GlyphCache::GlyphCache Heap Based Buffer Overflow

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=749 The following crash due to a heap-based buffer overflow can be observed in a slightly modified ASAN build of the standard Graphite2 gr2FontTest utility git trunk, triggered wi...

Graphite2 - NameTable::getName Multiple Heap Out-of-Bounds Reads

Graphite2 - NameTable::getName Multiple Heap Out-of-Bounds Reads Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=756 We have encountered several different crashes in the graphite2::NameTable::getName method, observed in an ASAN build of the standard Graphite2 gr2FontTest utility...

Graphite2 - TtfUtil::CmapSubtable4NextCodepoint Heap Based Overread

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=755 The following crash due to a heap-based buffer overread can be observed in an ASAN build of the standard Graphite2 gr2FontTest utility git trunk, triggered with the following...