Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6ph-6g9p-25rc

Опубликовано: 29 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 7.5

Описание

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

EPSS

Процентиль: 7%
0.00028
Низкий

8.4 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

CVSS3: 7.5
nvd
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

CVSS3: 7.5
debian
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability tha ...

EPSS

Процентиль: 7%
0.00028
Низкий

8.4 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-787