CVE-2017-7774: Critical severity firefox vulnerability
An out of bounds read flaw related to "graphite2::Silf::readGraphite" has been reported in graphite2. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
Other sources
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7774?
CVE-2017-7774 is classified as a moderate severity vulnerability due to the potential for an attacker to exploit it to disclose sensitive memory or crash applications.
How do I fix CVE-2017-7774?
To remediate CVE-2017-7774, update to Firefox version 118.0.2-1 or the latest versions of Firefox ESR and Graphite2 as specified in the security advisories.
Which software is affected by CVE-2017-7774?
CVE-2017-7774 affects Mozilla Firefox versions prior to 54.0 and several versions of the Graphite2 library.
Can CVE-2017-7774 cause application crashes?
Yes, CVE-2017-7774 can potentially cause application crashes due to out of bounds read flaws.
Is CVE-2017-7774 a type of memory vulnerability?
Yes, CVE-2017-7774 is an out of bounds read vulnerability that can disclose potentially sensitive memory.