Sil Graphite2 vulnerabilities

• sil graphite2 In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in... CVE-2018-7999 Fix available 8.8 HighMarch 9, 2018
• mozilla firefox, firefox esr, thunderbird +2 more +4 more A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads,... CVE-2017-7778 Fix available 9.8 CriticalJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache:... CVE-2017-7777 Fix available 8.8 HighJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf:... CVE-2017-7776 Fix available 8.1 HighJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite... CVE-2017-7774 Fix available 9.1 CriticalJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src... CVE-2017-7773 Fix available 8.8 HighJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. CVE-2017-7772 Fix available 8.8 HighJune 14, 2017
• mozilla firefox, sil graphite2 +1 more Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function. CVE-2017-7771 Fix available 8.1 HighJune 14, 2017
• mozilla firefox, firefox esr, thunderbird +8 more +10 more An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite... CVE-2017-5436 Fix available 8.8 HighApril 20, 2017
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used... CVE-2016-2802 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6,... CVE-2016-2801 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla... CVE-2016-2800 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6,... CVE-2016-2799 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla... CVE-2016-2798 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in... CVE-2016-2797 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2... CVE-2016-2796 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla... CVE-2016-2795 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used... CVE-2016-2794 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, opensuse leap, opensuse +3 more +5 more CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR... CVE-2016-2793 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla... CVE-2016-2792 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox... CVE-2016-2791 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2, opensuse leap +3 more +5 more The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla... CVE-2016-2790 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, opensuse leap, opensuse +3 more +5 more The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in... CVE-2016-1977 Fix available 8.8 HighMarch 7, 2016
• mozilla firefox, sil graphite2 +1 more The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and... CVE-2016-1969 Fix available 8.8 HighFebruary 14, 2016
• mozilla firefox, debian linux, fedoraproject fedora +2 more +4 more The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in... CVE-2016-1526 Fix available 8.1 HighFebruary 8, 2016
• mozilla firefox, debian linux, fedoraproject fedora +2 more +4 more The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in... CVE-2016-1523 Fix available 6.5 MediumFebruary 8, 2016
• mozilla firefox, debian linux, fedoraproject fedora +2 more +4 more Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox... CVE-2016-1522 Fix available 8.8 HighFebruary 8, 2016
• mozilla firefox, debian linux, fedoraproject fedora +2 more +4 more The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in... CVE-2016-1521 Fix available 8.8 HighFebruary 8, 2016