Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-37011

Опубликовано: 29 янв. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

EPSS

Процентиль: 11%
0.00036
Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

CVSS3: 7.5
debian
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability tha ...

CVSS3: 7.5
github
9 дней назад

Gnome Fonts Viewer 3.34.0 contains a heap corruption vulnerability that allows attackers to trigger an out-of-bounds write by crafting a malicious TTF font file. Attackers can generate a specially crafted TTF file with an oversized pattern to cause an infinite malloc() loop and potentially crash the gnome-font-viewer process.

EPSS

Процентиль: 11%
0.00036
Низкий

7.5 High

CVSS3

Дефекты

CWE-787