CVE-2026-50593
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в graphite2 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.