CVE Tools

Sil

19 CVEs tracked since 2016. Since Feb 2016, none of them reached CISA KEV.

Sil CVEs per month

Feb 2016 to Mar 2016. Point at a month, or focus the strip and use the arrow keys.
Sil CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0240
2016-03150

Products

The products that kept showing up in Sil's monthly top three, with their CVEs summed over those months.

  1. Graphite2192 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Sil.

  1. CVE-2017-7777Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.8.8
  2. CVE-2017-7776Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.8.1
  3. CVE-2017-7774Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.9.1
  4. CVE-2017-7773Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.8.8
  5. CVE-2017-7771Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.8.1
  6. CVE-2017-7772Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.8.8
  7. CVE-2017-5436An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library ...8.8
  8. CVE-2017-7778A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in G...9.8
  9. CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or po...8.8
  10. CVE-2016-2794The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a ...8.8
  11. CVE-2016-2802The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a d...8.8
  12. CVE-2016-2795The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified dat...8.8
  13. CVE-2016-2797The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial ...8.8
  14. CVE-2016-2791The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (...8.8
  15. CVE-2016-2790The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data...8.8

The record

Peak rank
#12 in Mar 2016
Busiest month shown
Mar 2016, 15 CVEs
Months with a KEV entry
0 since Feb 2016
Monthly snapshots
2 since 2016
Sil's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store