CVE-2014-9670

freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference

Published Feb 8, 2015 CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed
Description
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-185-1 freetype security update
Debian DSA Debian DSA DSA-3188-1 freetype security update
EUVD EUVD EUVD-2014-9480 Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
Ubuntu USN Ubuntu USN USN-2510-1 FreeType vulnerabilities
History

No history.