CVE-2018-7999 PUBLISHED

In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.

EPSS 0.47% · 64.2th percentile

Risk Scores

EPSS Score
0.47%
64.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSgraphite20, 1.2.3-1, 1.2.4-1
Ubuntu:Pro:16.04:LTSgraphite20, 1.2.4-3ubuntu1, 1.3.5-1ubuntu1

Timeline

References

Open in Interactive Console →