CVE-2017-7776

Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph...

CVE-2017-7776: Out-of-bounds Read

Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph...

Amazon Linux AMI : graphite2 (ALAS-2017-872)

Vulnerabilities in the Graphite 2 library MFSA 2017-16 A heap-based buffer overflow flaw related to 'lz4::decompress' has been reported in graphite2. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code. CVE-2017-7778 Heap-buffer-overflow write...

PT-2017-17937

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54 Description A heap-based buffer overflow read issue exists in the Graphite2 library. The problem is located in the graphite2::Silf::getClassGlyph function. Recommendations For Firefox versions prior to 54, update t...