New issue
Advanced search Search tips
ListGrid
Loading...
  ID ▼ Type ▼ Status ▼ Priority ▼ Milestone ▼ Owner ▼ Summary + Labels ▼ ...
  183 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 Type42 parsing out-of-bounds read in "ps_table_add" CCProjectZeroMembers  
  184 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 SFNT cmap parsing out-of-bounds read in "tt_cmap4_validate" CCProjectZeroMembers  
  185 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 CFF CharString parsing heap-based buffer overflow in "cff_builder_add_point" CCProjectZeroMembers  
  186 ---- Fixed ---- ---- forshaw@google.com IE11: CShdocvwBroker::EditWith EPM Sandbox Escape CCProjectZeroMembers  
  187 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 Type42 parsing use-after-free in "FT_Stream_TryRead" (embedded BDF loading) CCProjectZeroMembers  
  188 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 BDF parsing NULL pointer dereference in "_bdf_parse_glyphs" CCProjectZeroMembers  
  189 ---- Fixed ---- ---- forshaw@google.com IE11: CShdocvwBroker::MOTWCreateFileW EPM Local File Information Disclosure CCProjectZeroMembers  
  190 ---- Fixed ---- ---- mjurczyk@google.com FreeType 2.5.3 CFF hintmap building stack-based arbitrary out-of-bounds write CCProjectZeroMembers  
  191 ---- Fixed ---- ---- cevans@google.com Exploitable Kernel NULL dereference in IGAccelCLContext::map_user_memory CCProjectZeroMembers  
  193 ---- Fixed ---- ---- scvitti@google.com netkvm.sys (RedHat virtio driver) BSoD on malformed IPv4 packet CCProjectZeroMembers