CVE-2016-4852: Aki-Null Yorufukurou

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

YoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though this support is missing from the CoreText CTFramesetter API on OS X 10.9, which allows remote attackers to cause a denial of service (application crash) via a crafted emoji character sequence.

Affected products

  • Aki-Null Yorufukurou: up to and including 2.84

Published 2016-09-12. Last modified 2026-06-17.