130 matches found
CVE-2026-58496
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...
CVE-2026-58496 ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...
CVE-2026-58496
Thor Vector Graphics (ThorVG ) contains an out-of-bounds read vulnerability in the SFNT/TTF font loader prior to version 1.0.7 . The root cause is located in the SfntLoader::gen function within tvgSfntLoader.cpp, which accesses data[0] through data[3] without verifying that the input buffer conta...
CVE-2026-58496 ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...
EUVD-2020-30906
Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc loop and potentially crash th...
CVE-2020-37011
Gnome Fonts Viewer 3.34.0 is affected by a heap corruption vulnerability that allows out-of-bounds writes via a malformed TrueType Font (TTF) file. A crafted TTF with an oversized pattern can trigger an infinite malloc() loop and potentially crash the gnome-font-viewer process. Mitigation notes f...
CVE-2020-37011
Removed by vendor...
CVE-2020-37011: Out-of-bounds Write
Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to exhaust memory through repeated malloc calls and...
EUVD-2016-0819
Malware in sbrugna...
EUVD-2018-16693
Malware in sbrugna...
EUVD-2019-8932
Malware in sbrugna...
EUVD-2025-8094
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-0808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01...
CVE-2025-27833
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...
DEBIAN-CVE-2025-27833
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...
CVE-2025-27833
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...
CVE-2025-27833
Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a buffer overflow (CWE-120) occurring when processing a long TTF font name in the pdf/pdf_fmap.c file. This flaw is related to a numerical overflow condition and can be exploited to cause a service failure . For users of the GPL Ghos...
CVE-2025-27833
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...
CVE-2025-27833: Buffer Copy without Checking Size of Input
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...