← All advisories

High severity8.8NVD Advisory· Published Apr 12, 2019· Updated Jun 17, 2026

CVE-2017-7772

CVE-2017-7772

Description

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Mozilla Corporation/Firefox3 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <54.0
- (no CPE)range: <54
- (no CPE)range: All versions prior to Firefox 54
Sil/Graphite2
cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*
Range: <1.3.10
osv-coords
pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012
Range: < 52.2-36.1

Patches

Vulnerability mechanics

References

1

www.mozilla.org/en-US/security/advisories/mfsa2017-15/nvdExploitVendor Advisory

News mentions

0

No linked articles in our index yet.