REDHAT-BUG-1700447: High severity openjdk vulnerability

Published Apr 16, 2019

Updated

A out of bounds access flaw was found in the font layout engine in the 2D component of OpenJDK. Missing validation of the position value in GlyphIterator::setCurrGlyphID could lead to memory corruption, triggered by a specially crafted font file. An untrusted Java application or applet could possibly use this flaw to bypass Java sandbox restrictions.

Affected Software

1 affected component

OpenJDK OpenJDK

Event History

Apr 16, 2019

Data Sourced

via Red Hat·03:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1700447?

The severity of REDHAT-BUG-1700447 is classified as medium due to potential memory corruption risks.

How do I fix REDHAT-BUG-1700447?

To fix REDHAT-BUG-1700447, update your OpenJDK to the latest version that includes the security patches addressing this issue.

What systems are affected by REDHAT-BUG-1700447?

REDHAT-BUG-1700447 affects systems running vulnerable versions of OpenJDK.

What kind of attacks can REDHAT-BUG-1700447 facilitate?

REDHAT-BUG-1700447 can facilitate attacks through untrusted Java applications or applets that exploit the out-of-bounds access vulnerability.

When was REDHAT-BUG-1700447 publicly disclosed?

REDHAT-BUG-1700447 was publicly disclosed in April 2019.