The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 graphite2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1"}]}]

Debian:13 graphite2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1"}]}]

Debian:14 graphite2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1"}]}]

参照URL

advisory security-tracker.debian.org