44 matches found
BrokenType
BrokenType BrokenType 是一套用于测试字体光栅化软件鲁棒性和安全性的工具集,尤其针对容易出现内存损坏问题的代码库(例如基于 C/C++ 及其类似语言编写的)。它包含以下组件: TrueType 程序生成器 - 一个 Python 脚本,用于生成随机但有效的 TrueType 程序。 TTF/OTF 变异器 - 一个用 C++ 编写的半“智能”二进制字体文件变异器。 Windows GDI 的 TTF/OTF 加载器 - 一个用于通过 Windows GDI/Uniscribe 加载和测试自定义字体的实用工具。 DirectWrite 的 TTF/OTF 加载器 -...
SUSE CVE-2026-88367
NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...
Linux Distros Unpatched Vulnerability : CVE-2026-88367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document...
CVE-2026-88367
A flaw was found in NanoSVG. By providing a specially crafted SVG document with an excessively large stroke width, an attacker can trigger an improper numeric conversion during stroke rasterization. This issue causes an unexpected process termination, leading to a Denial of Service DoS...
CVE-2026-88367
NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...
CVE-2026-88367: Incorrect Conversion between Numeric Types
NanoSVG 239e102ec contains an incorrect numeric conversion vulnerability in nsvgcurveDivs during SVG stroke rasterization. A specially crafted SVG document containing an extremely large stroke-width can cause floating-point rounding to produce a zero subdivision angle. The subsequent arc division...
CLSA-2026-1777446167 pixman: Fix of CVE-2022-44638
CVE-2022-44638: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write in rasterizeedges8...
CVE-2026-26178
Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...
The vulnerability of the Windows Advanced Rasterization Platform (WARP) in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows Advanced Rasterization Platform WARP in Windows operating systems is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...
EUVD-2026-22418
Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...
CVE-2026-26178
Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...
CVE-2026-26178
CVE-2026-26178 is a Windows Advanced Rasterization Platform Elevation of Privilege vulnerability with CVSS v3.1 base score 8.8 (HIGH). The issue is exploitable via NETWORK with LOW attack complexity and NONE privileges required, but it requires user interaction. Impact is rated HIGH for confident...
CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
...
CVE-2026-26178 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
...
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...
Microsoft Windows 安全漏洞
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in the Microsoft Windows Advanced Rasterization Platform. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and...
PT-2026-32755
CVE-2026-26178 Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally. https://t.co/6dbFxYiIih...
CVE-2026-26178: Incorrect Conversion between Numeric Types
Integer size truncation in Windows Advanced Rasterization Platform WARP allows an unauthorized attacker to elevate privileges locally...
[SECURITY] Fedora 42 Update: ghostscript-10.05.1-1.fc42
This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...
Fedora: Security Advisory for ghostscript (FEDORA-2023-83c805b441)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...