CVE-2018-7999: Null Pointer Dereference

Published Mar 9, 2018

Updated

In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.

Affected Software

1 affected component

Sil Graphite2=1.3.11

Remediation

Patch Available

https://github.com/silnrsi/graphite/commit/db132b4731a9b4c9534144ba3a18e65b390e9ff6

Event History

Mar 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-7999?

CVE-2018-7999 is classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2018-7999?

To mitigate CVE-2018-7999, upgrade to a patched version of libgraphite2 that addresses this vulnerability.

What causes the vulnerability CVE-2018-7999?

CVE-2018-7999 is caused by a NULL pointer dereference in the Segment.cpp during a dumbRendering operation.

Which version of libgraphite2 is affected by CVE-2018-7999?

The specific version of libgraphite2 affected by CVE-2018-7999 is 1.3.11.

What impact can CVE-2018-7999 have on a system?

CVE-2018-7999 can lead to a denial of service, and potentially other unspecified impacts through the processing of a crafted .ttf file.