graphite2 vulnerabilities

CVEs whose affected-version data names the graphite2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2017-5436High· 8.8

8y ago

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulner…

▾ Twilightsil · graphite2EPSS 2.3%via NVD