CVE-2017-7777: Buffer Overflow
The use of uninitialized memory related to "graphite2::GlyphCache::Loader::readglyph" has been reported in graphite2. An attacker could possibly exploit this flaw to negatively impact the execution of an application using graphite2 in unknown ways.
Other sources
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::readglyph function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7777?
CVE-2017-7777 has moderate severity as it involves the use of uninitialized memory that can impact application execution.
How do I fix CVE-2017-7777?
To fix CVE-2017-7777, update to the recommended versions of affected software such as Firefox, Firefox ESR, or Graphite2.
What software is affected by CVE-2017-7777?
CVE-2017-7777 affects the Firefox and Firefox ESR browsers, as well as the Graphite2 library.
Can CVE-2017-7777 be exploited remotely?
While CVE-2017-7777 could potentially be exploited, the exact exploit methods are not defined, making remote exploitation uncertain.
What kind of impact could CVE-2017-7777 have on users?
CVE-2017-7777 could negatively affect the execution of applications using Graphite2, leading to unpredictable behaviors.