{"id":"CVE-2016-1969","aliases":["DEBIAN-CVE-2016-1969","DSA-3477-1","DSA-3515-1","EUVD-2016-3058","GHSA-29w8-qmxg-g64x","RHSA-2016:0197","UBUNTU-CVE-2016-1969"],"status":"published","title":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and...","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01665,"percentile":0.76879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-02-14T00:00:00Z","modified":"2026-10-24T10:30:23Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["45.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["45.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["45.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"graphite2","fixed_in":["1.3.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphite2","fixed_in":["1.3.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphite2","fixed_in":["1.3.6-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["45.0+build2-0ubuntu0.14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.6.1esr-1~deb7u1"}]}],"versions":["10.0.12esr-1","10.0.12esr-1+alpha","10.0.12esr-1+nmu1","10.0.12esr-1+nmu1+alpha","11.0-1","11.0-2","11.0-3","11.0-4","11.0~b1-1","11.0~b1-2","11.0~b2-1","11.0~b3-1","11.0~b4-1","11.0~b5-1","11.0~b6-1","12.0-1","12.0-2","12.0-3","12.0-4","12.0-5","12.0-6","12.0-7","13.0-1","13.0.1-1","13.0.1-2","14.0.1-1","14.0.1-2","15.0-1","15.0.1-1","16.0-1","16.0.1-1","16.0.2-1","17.0-1","17.0.1-1","17.0.1-2","17.0.10esr-1~deb7u1","17.0.5esr-1","17.0.6esr-1","17.0.6esr-1~deb7u1","17.0.7esr-1","17.0.7esr-1~deb7u1","17.0.7esr-2","17.0.8esr-1","17.0.8esr-1~deb7u1","17.0.8esr-2","17.0.8esr-2~deb7u1","17.0.9esr-1~deb7u1","18.0-1","18.0.1-1","18.0.2-1","19.0-1","19.0.2-1","20.0-1","21.0-1","22.0-1","23.0-1","23.0-2","23.0.1-1","24.0-1","24.0-2","24.0~b4-1","24.0~b7-1","24.0~b9-1","24.1.0esr-1","24.1.0esr-1+powerpcspe1","24.2.0esr-1","24.2.0esr-1+alpha","24.2.0esr-1+powerpcspe1","24.3.0esr-1","24.3.0esr-1+alpha","24.3.0esr-1~deb7u1","24.4.0esr-1","24.4.0esr-1~deb7u2","24.5.0esr-1","24.5.0esr-1~deb7u1","24.6.0esr-1~deb7u1","24.7.0esr-1~deb7u1","24.8.0esr-1~deb7u1","24.8.1esr-1~deb7u1","25.0-1","25.0~b3-1","25.0~b9-1","26.0-1","27.0-1","27.0-2","27.0.1-1","28.0-1","29.0-1","29.0-2","29.0.1-1","29.0.1-1+alpha","29.0.1-2","30.0-1","30.0-2","30.0~b3-1","30.0~b5-1","30.0~b5-2","30.0~b5-3","30.0~b7-1","31.0-1","31.0-2","31.0-3","31.0~b1-1","31.0~b3-1","31.1.0esr-1","31.2.0esr-1","31.2.0esr-1~deb7u1","31.2.0esr-2","31.2.0esr-2+hurd.0","31.2.0esr-2~deb7u1","31.2.0esr-3","31.2.0esr-3~deb7u1","31.3.0esr-1","31.3.0esr-1+powerpcspe1","31.3.0esr-1~deb7u1","31.4.0esr-1","31.4.0esr-1~deb7u1","31.5.0esr-1","31.5.0esr-1~deb7u1","31.5.3esr-1","31.5.3esr-1~deb7u1","31.6.0esr-1","31.6.0esr-1~deb7u1","31.7.0esr-1~deb7u1","31.7.0esr-1~deb8u1","31.8.0esr-1~deb7u1","31.8.0esr-1~deb8u1","32.0-1","32.0.3-1","32.0~b1-1","32.0~b3-1","32.0~b5-1","33.0-1","33.0-2","33.1-1","34.0-1","35.0-1","35.0.1-1","36.0-1","36.0-2","36.0.1-1","36.0.1-2","36.0.4-1","37.0-1","37.0.1-1","37.0.2-1","38.0-1","38.0-2","38.0.1-1","38.0.1-2","38.0.1-3","38.0.1-4","38.0.1-5","38.1.0esr-1","38.1.0esr-2","38.1.0esr-3","38.1.1esr-1","38.1.1esr-1~deb9u1","38.2.0esr-1","38.2.0esr-1~deb7u1","38.2.0esr-1~deb8u1","38.2.0esr-1~stretch","38.2.1esr-1","38.2.1esr-1~deb7u1","38.2.1esr-1~deb8u1","38.3.0esr-1","38.3.0esr-1~deb7u1","38.3.0esr-1~deb8u1","38.4.0esr-1","38.4.0esr-1~deb7u1","38.4.0esr-1~deb8u1","38.5.0esr-1","38.5.0esr-1~deb7u2","38.5.0esr-1~deb8u1","38.5.0esr-1~deb8u2","38.6.0esr-1~deb7u1","38.6.0esr-1~deb8u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"iceweasel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"38.6.1esr-1~deb8u1"}]}],"versions":["31.6.0esr-1","31.7.0esr-1~deb7u1","31.7.0esr-1~deb8u1","31.8.0esr-1~deb7u1","31.8.0esr-1~deb8u1","32.0-1","32.0.3-1","32.0~b1-1","32.0~b3-1","32.0~b5-1","33.0-1","33.0-2","33.1-1","34.0-1","35.0-1","35.0.1-1","36.0-1","36.0-2","36.0.1-1","36.0.1-2","36.0.4-1","37.0-1","37.0.1-1","37.0.2-1","38.0-1","38.0-2","38.0.1-1","38.0.1-2","38.0.1-3","38.0.1-4","38.0.1-5","38.1.0esr-1","38.1.0esr-2","38.1.0esr-3","38.1.1esr-1","38.1.1esr-1~deb9u1","38.2.0esr-1","38.2.0esr-1~deb7u1","38.2.0esr-1~deb8u1","38.2.0esr-1~stretch","38.2.1esr-1","38.2.1esr-1~deb7u1","38.2.1esr-1~deb8u1","38.3.0esr-1","38.3.0esr-1~deb7u1","38.3.0esr-1~deb8u1","38.4.0esr-1","38.4.0esr-1~deb7u1","38.4.0esr-1~deb8u1","38.5.0esr-1","38.5.0esr-1~deb7u2","38.5.0esr-1~deb8u1","38.5.0esr-1~deb8u2","38.6.0esr-1~deb7u1","38.6.0esr-1~deb8u1","38.6.1esr-1~deb7u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1~deb7u1"}]}],"versions":["1.1.3-1","1.1.3-1+powerpcspe1","1.2.0-1","1.2.0-2","1.2.0-3","1.2.0-4","1.2.1-1","1.2.1-2","1.2.1-2+powerpcspe1","1.2.2-1","1.2.2-1+alpha","1.2.2-2","1.2.3-1","1.2.3-1+powerpcspe1","1.2.4-1","1.2.4-1+powerpcspe1","1.2.4-2","1.2.4-3","1.3.0-1","1.3.0-2","1.3.2-1","1.3.2-2","1.3.2-3","1.3.2-4","1.3.3-1","1.3.4-1","1.3.4-2","1.3.5-1","1.3.5-1~deb7u1","1.3.5-1~deb8u1"],"bundled":15},{"source":"osv","ecosystem":"Debian:8","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1~deb8u1"}]}],"versions":["1.2.4-3","1.3.0-1","1.3.0-2","1.3.2-1","1.3.2-2","1.3.2-3","1.3.2-4","1.3.3-1","1.3.4-1","1.3.4-2","1.3.5-1","1.3.5-1~deb7u1","1.3.5-1~deb8u1","1.3.6-1~deb7u1","1.3.6-1~deb7u2"],"bundled":15},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el5_11"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el5_11"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el5_11"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el5_11"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el6_7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:38.6.1-1.el7_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0+build2-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1"]}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"sil","product":"graphite2"}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1242322","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.securitytracker.com/id/1035215","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201605-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-38.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1969","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-29w8-qmxg-g64x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1969","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0197","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/security/announce/2016/mfsa2016-14.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1306496","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0197.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1521","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1521","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0058/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1522","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0057/","tags":["article"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0060/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1523","tags":["advisory"]},{"url":"http://www.talosintel.com/reports/TALOS-2016-0059/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1317560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1969","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-38/","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2016-1969","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-1969","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:00:00Z","modified":"2024-08-05T23:17:49.908Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-3058","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:00:00Z","modified":"2024-08-05T23:17:49Z","updated_at":"2026-11-03T02:22:55.100655Z"}],"ghsa":[{"id":"GHSA-29w8-qmxg-g64x","title":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and...","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2022-05-17T03:31:20Z","modified":"2023-01-27T05:07:10Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:03.960564Z"}],"nvd":[{"id":"CVE-2016-1969","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:59:18.583Z","modified":"2026-06-17T00:42:59.953Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:22.479119Z"}],"osv":[{"id":"CVE-2016-1969","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:59:18.583Z","modified":"2026-10-24T10:30:23.590791854Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-1969","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:59:18.583Z","modified":"2026-09-22T07:02:55.878305178Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-1969","description":"The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.","status":"published","published":"2016-03-13T18:59:00Z","modified":"2026-04-22T10:35:33.26491Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"DSA-3477-1","title":"iceweasel - security update","status":"published","published":"2016-02-14T00:00:00Z","modified":"2026-03-09T01:21:52.265063Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"DSA-3515-1","title":"graphite2 - security update","status":"published","published":"2016-03-13T00:00:00Z","modified":"2026-03-09T01:18:56.674968Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"RHSA-2016:0197","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-15T23:12:24Z","modified":"2026-06-27T10:04:04Z","updated_at":"2026-11-02T15:53:03.734507Z"}]}}