Security Advisory

CVE-2016-1523

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-02-13 02:00:00
Last updated 2024-08-05 23:02:11
Assigner certcc
State PUBLISHED

Description

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.