https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:48:22.919783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00576 bdu:2016-00576 2026-10-03T00:48:22.927181+00:00 bdu:2016-00576 https://cve.radiocsirt.org/vuln/cnvd-2016-01202 cnvd-2016-01202 2026-10-03T00:48:22.927244+00:00 cnvd-2016-01202 https://cve.radiocsirt.org/vuln/euvd-2026-82279 EUVD-2026-82279 2026-10-03T00:48:22.927266+00:00 EUVD-2026-82279 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1526 fkie_cve-2016-1526 2026-10-03T00:48:22.927279+00:00

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

 https://cve.radiocsirt.org/vuln/ghsa-44hj-fxxj-472x GHSA-44hj-fxxj-472x 2026-10-03T00:48:22.927311+00:00

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

 https://cve.radiocsirt.org/vuln/gsd-2016-1526 gsd-2016-1526 2026-10-03T00:48:22.927328+00:00 gsd-2016-1526 https://cve.radiocsirt.org/vuln/rhsa-2016:0594 RHSA-2016:0594 — Red Hat Security Advisory: graphite2 security, bug fix, and enhancement update 2026-10-03T00:48:22.927339+00:00

graphite2: Out-of-bound read vulnerability triggered by crafted fonts graphite2: Null pointer dereference and out-of-bounds access vulnerabilities graphite2: Heap-based buffer overflow in context item handling functionality graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup

 https://cve.radiocsirt.org/vuln/suse-su-2016:0779-1 SUSE-SU-2016:0779-1 — Security update for graphite2 2026-10-03T00:48:22.927375+00:00

Security update for graphite2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1526 UBUNTU-CVE-2016-1526 2026-10-03T00:48:22.927391+00:00

Affected: Ubuntu:14.04:LTS: graphite2, Ubuntu:16.04:LTS: graphite2

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.