BrokenType

BrokenType BrokenType 是一套用于测试字体光栅化软件鲁棒性和安全性的工具集，尤其针对容易出现内存损坏问题的代码库（例如基于 C/C++ 及其类似语言编写的）。它包含以下组件： TrueType 程序生成器 - 一个 Python 脚本，用于生成随机但有效的 TrueType 程序。 TTF/OTF 变异器 - 一个用 C++ 编写的半“智能”二进制字体文件变异器。 Windows GDI 的 TTF/OTF 加载器 - 一个用于通过 Windows GDI/Uniscribe 加载和测试自定义字体的实用工具。 DirectWrite 的 TTF/OTF 加载器 -...

CVE-2026-65662

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62890

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62822

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

CVE-2026-61360

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

EUVD-2026-56677

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-62709 Windows GDI+ Information Disclosure Vulnerability

...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

EUVD-2026-56621

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

EUVD-2026-56434

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

EUVD-2026-56402

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

Windows GDI+ Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

PT-2026-70654

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70472

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...

PT-2026-70585

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This issue allows an authorized attacker to execute code locally or a...

PT-2026-70561

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer overflow or wraparound in Windows GDI+ allows an unauthorized remote attacker to execute arbitrary code and affect the system over a network. Recommendations At the moment,...

PT-2026-70431

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...