UBUNTU-CVE-2017-7777

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::readglyph function...

CVE-2017-7773

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor...

CVE-2017-7771

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function...

PT-2017-17935

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54 Description The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the graphite2::Silf::readGraphite function. Recommendations For versions prior to 54, update to version 54 or later t...

PT-2017-17934

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54 Description The issue is related to an out-of-bounds read in the Graphite2 Library. It occurs in the graphite2::Pass::readPass function, which suggests a problem with how data is accessed and processed...

MGASA-2016-0129 Updated thunderbird/thunderbird-l10n packages fix security vulnerability

Disables the Graphite2 font shaping library due to security issues...

graphite2 -- multiple vulnerabilities

Mozilla Foundation reports: Security researcher Holger Fuhrmannek and Mozilla security engineer Tyson Smith reported a number of security vulnerabilities in the Graphite 2 library affecting version 1.3.5. The issue reported by Holger Fuhrmannek is a mechanism to induce stack corruption with a...

MGASA-2016-0077 Updated graphite2/firefox packages fix security vulnerability

Multiple vulnerabilities in the graphite2 font library can result in information disclosure, denial-of-service application crashes, or code execution via out-of-bounds reads, a NULL pointer dereference, and a heap-based buffer overflow CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526...