Vulnerability Spotlight: Libgraphite Font Processing Vulnerabilities
Summary: Cisco Talos disclosed four vulnerabilities in the Libgraphite font-processing library, used in Linux, Firefox, LibreOffice and other major applications, including an out-of-bounds read that can achieve arbitrary code execution, an exploitable heap overflow, and two denial-of-service issues. An attacker only needs the user to render a page with a specially crafted font in a Graphite-enabled application, and since Firefox versions 11-42 directly support Graphite, a compromised server can serve the malicious font when the user loads a page.
Bottom line: The most severe flaw lets the TTF virtual machine execute attacker-controlled code, and in a browser JavaScript can place arbitrary bytecode in memory for it to use. Firefox 11 through 42 shipped with Graphite support built in, so a single compromised server serving a crafted font is enough to reach users without any other action on their part.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026