CVE-2018-7999

概要

参考情報

• silnrsi/graphite commit db132b4 · Patch
• silnrsi/graphite · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5F3CK2IPXFCLQZEBEEXONWIABN2E7H2
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVWOKYZZDEMG6VSG53KAGUOHUIIQ7CND

graphite2 のその他の脆弱性

• CVE-2017-7777高 8.8Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.
• CVE-2017-7776高 8.1Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
• CVE-2017-7774緊急 9.1Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
• CVE-2017-7773高 8.8Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
• CVE-2017-7771高 8.1Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.