JLSEC-2026-455 Gnome Pango 1.42 and later is affected by: Buffer Overflow

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when...

SUSE CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when...

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

...

qt:qtbase_gui_text_qtextdocument_sethtml: Global-buffer-overflow in QTextEngine::itemize

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5325563985264640 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguitextqtextdocumentsethtml Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address:...

DEBIAN-CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when...

PT-2019-2902

Name of the Vulnerable Software and Affected Versions Gnome Pango versions 1.42 and later Description The issue is related to a buffer overflow in the pango log2vis get embedding levels function, specifically with the assignment of nchars and the loop condition. This can be exploited when an...