Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
],
"source": "CPE_FIELD",
"vendor_product": "mozilla:firefox",
"extracted_events": [
{
"fixed": "54.0"
}
]
}
]
}