CVE-2016-1521

High

Published: 13/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 version 1.2.4, as used in Mozilla Firefox before version 43.0 and Firefox ESR 38.x before version 38.6.1, does not validate a certain skip operation. This allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via a crafted Graphite smart font.

Risk Assessment

This vulnerability poses a serious risk to organizations, allowing attackers to remotely execute code and access sensitive data. It may also lead to application crashes, affecting service availability.

Recommendation

It is recommended to update Mozilla Firefox to version 43.0 or later and Firefox ESR to version 38.6.1 or later to mitigate this vulnerability.

Other vulnerabilities in Libgraphite w Graphite 2

CVE-2016-1522High
In the Libgraphite library in Graphite 2 version 1.2.4, used in Mozilla Firefox before version 43.0 and Firefox ESR 38.x before version 38.6.1, recursive load calls are not considered during size checks. This can lead to denial of service (heap-based buffer overflow) or potentially allow arbitrary code execution via a crafted Graphite smart font.

Original NVD description (English source)

The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.