https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:18:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-00574 bdu:2016-00574 https://cve.radiocsirt.org/vuln/bdu:2016-00574 https://cve.radiocsirt.org/vuln/cnvd-2016-01200 cnvd-2016-01200 https://cve.radiocsirt.org/vuln/cnvd-2016-01200 https://cve.radiocsirt.org/vuln/euvd-2026-82249 EUVD-2026-82249 https://cve.radiocsirt.org/vuln/euvd-2026-82249 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1522 <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-1522 https://cve.radiocsirt.org/vuln/ghsa-g9c3-vp28-w6w3 <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> https://cve.radiocsirt.org/vuln/ghsa-g9c3-vp28-w6w3 https://cve.radiocsirt.org/vuln/gsd-2016-1522 gsd-2016-1522 https://cve.radiocsirt.org/vuln/gsd-2016-1522 https://cve.radiocsirt.org/vuln/rhsa-2016:0197 <p>graphite2: Out-of-bound read vulnerability triggered by crafted fonts graphite2: Null pointer dereference and out-of-bounds access vulnerabilities graphite2: Heap-based buffer overflow in context item handling functionality mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)</p> <p>graphite2: Out-of-bound read vulnerability triggered by crafted fonts graphite2: Null pointer dereference and out-of-bounds access vulnerabilities graphite2: Heap-based buffer overflow in context item handling functionality mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0197 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1522 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: graphite2, Ubuntu:16.04:LTS: graphite2</p> <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: graphite2, Ubuntu:16.04:LTS: graphite2</p> <p>Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1522