Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 87

Export CSV
CVE-2012-1128

freetype: NULL dereference in the SHZ instruction implementation in TTF BCI (#35601)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.6% KEV · Not listed
Vendors
Freetype Mozilla
Products
Freetype Firefox Mobile
CVE-2012-1129

freetype: heap off-by-one buffer underflow in Type42 parser t42_parse_sfnts() (#35602)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla
Products
Freetype Firefox Mobile
CVE-2012-1144

freetype: insufficient checking of first outline point in TTF parser (#35689)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1143

freetype: integer divide by zero in FT_DivFix() (#35660)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1142

freetype: incorrect computation of number of glyphs in FNT_Face_Init() for FNT/FON files (#35659)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1141

freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1140

freetype: multiple buffer over-read in PS parser conversion functions (#35657)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux