CVE-2026-50593
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour graphite2 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 2
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range.
In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.