CVE-2017-7773

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.

Score

CVSS 3.0 8.8 High

Status

Modified - security@mozilla.org

Published

2019-04-15

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-122

Affected products

• Firefox (Mozilla)
• Graphite2 (Sil)

References

• https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/