https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:08:02.321990+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00749 bdu:2016-00749 2026-10-03T20:08:02.327556+00:00 bdu:2016-00749 https://cve.radiocsirt.org/vuln/cnvd-2016-01651 cnvd-2016-01651 2026-10-03T20:08:02.327593+00:00 cnvd-2016-01651 https://cve.radiocsirt.org/vuln/euvd-2026-82658 EUVD-2026-82658 2026-10-03T20:08:02.327609+00:00 EUVD-2026-82658 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1969 fkie_cve-2016-1969 2026-10-03T20:08:02.327621+00:00

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.

 https://cve.radiocsirt.org/vuln/ghsa-29w8-qmxg-g64x GHSA-29w8-qmxg-g64x 2026-10-03T20:08:02.327650+00:00

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.

 https://cve.radiocsirt.org/vuln/gsd-2016-1969 gsd-2016-1969 2026-10-03T20:08:02.327665+00:00 gsd-2016-1969 https://cve.radiocsirt.org/vuln/rhsa-2016:0197 RHSA-2016:0197 — Red Hat Security Advisory: firefox security update 2026-10-03T20:08:02.327675+00:00

graphite2: Out-of-bound read vulnerability triggered by crafted fonts graphite2: Null pointer dereference and out-of-bounds access vulnerabilities graphite2: Heap-based buffer overflow in context item handling functionality mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1969 UBUNTU-CVE-2016-1969 2026-10-03T20:08:02.327695+00:00

Affected: Ubuntu:14.04:LTS: firefox

The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.6.1, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted Graphite smart font.