PatchTheCVE: graphite2https://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-7777: Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_ghttps://patchthecve.com/cve/CVE-2017-7777.htmlhttps://patchthecve.com/cve/CVE-2017-7777.htmlWed, 17 Jun 2026 01:25:10 +0000HIGH 8.8: Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.CVE-2017-7776: Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.https://patchthecve.com/cve/CVE-2017-7776.htmlhttps://patchthecve.com/cve/CVE-2017-7776.htmlWed, 17 Jun 2026 01:25:10 +0000HIGH 8.1: Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.CVE-2017-7774: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.https://patchthecve.com/cve/CVE-2017-7774.htmlhttps://patchthecve.com/cve/CVE-2017-7774.htmlWed, 17 Jun 2026 01:25:10 +0000CRITICAL 9.1: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.CVE-2017-7773: Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressorhttps://patchthecve.com/cve/CVE-2017-7773.htmlhttps://patchthecve.com/cve/CVE-2017-7773.htmlWed, 17 Jun 2026 01:25:09 +0000HIGH 8.8: Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.CVE-2017-7771: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.https://patchthecve.com/cve/CVE-2017-7771.htmlhttps://patchthecve.com/cve/CVE-2017-7771.htmlWed, 17 Jun 2026 01:25:09 +0000HIGH 8.1: Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.CVE-2017-7778: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow https://patchthecve.com/cve/CVE-2017-7778.htmlhttps://patchthecve.com/cve/CVE-2017-7778.htmlWed, 17 Jun 2026 01:25:10 +0000CRITICAL 9.8: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird CVE-2018-7999: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during https://patchthecve.com/cve/CVE-2018-7999.htmlhttps://patchthecve.com/cve/CVE-2018-7999.htmlWed, 17 Jun 2026 02:04:03 +0000HIGH 8.8: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file.