Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially-crafted font file, a remote attacker could use this issue to cause graphite2 to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "availability": "No subscription required", "binaries": [ { "libgraphite2-3": "1.3.10-0ubuntu0.14.04.1", "libgraphite2-3-dbgsym": "1.3.10-0ubuntu0.14.04.1", "libgraphite2-doc": "1.3.10-0ubuntu0.14.04.1", "libgraphite2-3-dbg": "1.3.10-0ubuntu0.14.04.1", "libgraphite2-dev": "1.3.10-0ubuntu0.14.04.1", "libgraphite2-dev-dbgsym": "1.3.10-0ubuntu0.14.04.1" } ] }