CVE-2026-50593
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para graphite2 en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 2
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.