Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 97

Export CSV
CVE-2014-9668

freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow

The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Fedoraproject Freetype and 1 more
Products
Ubuntu Linux Fedora Freetype and 1 more
CVE-2014-9669

freetype: multiple integer overflows leading to buffer over-reads in cmap handling

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 10 more
CVE-2014-9670

freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference

Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.

CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 10 more
CVE-2014-9671

freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference

Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.

CVSS 2.0 · 4.3 Medium EPSS 3.5% KEV · Not listed
Vendors
Canonical Debian Freetype and 3 more
Products
Ubuntu Linux Debian Linux Freetype and 9 more
CVE-2014-9672

freetype: Array index error in the parse_fond function in base/ftmac.c

Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.

CVSS 2.0 · 5.8 Medium EPSS 4.7% KEV · Not listed
Vendors
Canonical Debian Freetype and 2 more
Products
Ubuntu Linux Debian Linux Freetype and 2 more
CVE-2014-9673

freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow

Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Freetype and 2 more
Products
Ubuntu Linux Debian Linux Freetype and 8 more
CVE-2014-9674

freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows

The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Canonical Fedoraproject Freetype and 3 more
Products
Ubuntu Linux Fedora Freetype and 9 more
CVE-2014-9675

freetype: information leak in _bdf_add_property()

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 9 more
CVE-2014-9746

freetype: Use of uninitialized memory

The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted font.

CVSS 3.0 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Debian Freetype
Products
Debian Linux Freetype
CVE-2012-5668

freetype: NULL Pointer Dereference in bdf_free_font (#37905)

FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Freetype
Products
Freetype
CVE-2010-2497

freetype: integer underflow vulnerability

Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed
Vendors
Apple Debian Freetype
Products
Mac Os X Debian Linux Freetype
CVE-2010-2498

freetype: invalid free vulnerability with possible heap corruption

The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Ubuntu Linux Debian Linux and 2 more
CVE-2010-2499

freetype: buffer overflow vulnerability

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.

CVSS 2.0 · 6.8 Medium EPSS 6.2% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Ubuntu Linux Debian Linux and 2 more
CVE-2010-2500

freetype: integer overflow vulnerability in smooth/ftgrays.c

Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.0% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Ubuntu Linux Debian Linux and 2 more
CVE-2010-2519

freetype: heap buffer overflow vulnerability when processing certain font files

Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.

CVSS 2.0 · 6.8 Medium EPSS 6.3% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Mac Os X Ubuntu Linux Debian Linux and 2 more
CVE-2010-2520

freetype: heap buffer overflow vulnerability in truetype bytecode support

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 5.1 Medium EPSS 5.7% KEV · Not listed
Vendors
Apple Canonical Debian and 1 more
Products
Mac Os X Ubuntu Linux Debian Linux and 1 more
CVE-2010-2527

Freetype demos multiple buffer overflows

Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.6% KEV · Not listed
Vendors
Canonical Debian Freetype and 1 more
Products
Ubuntu Linux Debian Linux Freetype and 1 more
CVE-2010-2541

Freetype ftmulti buffer overflow

Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed
Vendors
Canonical Freetype Redhat
Products
Ubuntu Linux Freetype Enterprise Linux
CVE-2010-2805

freetype: FT_Stream_EnterFrame() does not properly validate certain position values

The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 · 6.8 Medium EPSS 5.1% KEV · Not listed
Vendors
Apple Canonical Freetype and 1 more
Products
Iphone Os Mac Os X Tvos and 3 more
CVE-2010-2806

FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 5.8% KEV · Not listed
Vendors
Apple Canonical Freetype and 1 more
Products
Iphone Os Mac Os X Tvos and 3 more