Vulnerability	Vulnerable Version
C Out-of-bounds Write Affected versions of this package are vulnerable to Out-of-bounds Write when attempting to parse font subglyph structures related to TrueType GX and variable font files, an out of bounds write occurs. This issue arises from assigning a signed short value to an unsigned long and then adding a static value, causing it to wrap around and allocate a heap buffer that is too small. Consequently, up to 6 signed long integers are written out of bounds relative to this buffer, potentially leading to arbitrary code execution. How to fix Out-of-bounds Write? Upgrade `skia-python` to version 144.0.post1 or higher.	[,144.0.post1)

Out-of-bounds Write

Affected versions of this package are vulnerable to Out-of-bounds Write when attempting to parse font subglyph structures related to TrueType GX and variable font files, an out of bounds write occurs. This issue arises from assigning a signed short value to an unsigned long and then adding a static value, causing it to wrap around and allocate a heap buffer that is too small. Consequently, up to 6 signed long integers are written out of bounds relative to this buffer, potentially leading to arbitrary code execution.

How to fix Out-of-bounds Write?

Upgrade skia-python to version 144.0.post1 or higher.

[,144.0.post1)

Go back to all versions of this package