Skip to content
OpenAdvisories

Product · Mapbox

node-fontnik

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-63660

    node-fontnik: integer-overflow heap out-of-bounds write in RenderSDF

    node-fontnik is a library that delivers a range of glyphs rendered as SDFs (signed distance fields) in a protocol buffer. Prior to version 0.7.7, a crafted font could trigger a heap out-of-bounds write in RenderSDF (include/mapbox/glyph_foundry_impl.hpp). Ren…

    Mapbox node-fontnik