CVE-2010-2527
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to...
6.8 MediumFix available
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
Exploit likelihood
5.64%Down 1.0 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
CVE-2010-2527- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
CVE-2010-2527- Updated
- 2026-11-02
EUVDEUVD-2010-2531 No score
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
EUVD-2010-2531- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mc88-pmhf-w5pc No score
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to...
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
GHSA-mc88-pmhf-w5pc- Weakness
- CWE-120
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
CVE-2010-2527- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2527 No score
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
- Record
DEBIAN-CVE-2010-2527- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freetypeDebian:12 |
before 2.4.0-1 | 2.4.0-1 |
freetypeDebian:13 |
before 2.4.0-1 | 2.4.0-1 |
freetypeDebian:14 |
before 2.4.0-1 | 2.4.0-1 |
freetypeDebian:5.0 From an advisory covering 7 CVEs |
before 2.3.7-2+lenny2, plus listed versions 2.3.7-22.3.7-2+lenny1 |
2.3.7-2+lenny2 |
freetypeRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetypeRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
freetypeRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetypeRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetype-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-15.el3 | 0:2.1.4-15.el3 |
freetypeRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetypeRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetypeRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetypeRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:2.1.9-14.el4.8 | 0:2.1.9-14.el4.8 |
freetypeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-demosRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetypeRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetypeRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-demosRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
freetype-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.1-25.el5_5 | 0:2.2.1-25.el5_5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2527 is a medium vulnerability (CVSS 6.8) in Freetype, published July 14, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.64%, the 93rd percentile. Fixed in freetype 2.4.0-1.
References
ubuntu.com/usn/USN-963-1
bugzilla.redhat.com/show_bug.cgi?id=614557
lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
debian.org/security/2010/dsa-2070
git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit?id=b995299b73ba4cd259f221f500d4e63095508bec
securitytracker.com/id?1024266
Show 35 moreShow less
marc.info?l=oss-security&m=127912955808467&w=2
redhat.com/support/errata/RHSA-2010-0578.html
savannah.nongnu.org/bugs?30054
secunia.com/advisories/48951
nvd.nist.gov/vuln/detail/CVE-2010-2527
github.com/advisories/GHSA-mc88-pmhf-w5pc
security-tracker.debian.org/tracker/CVE-2010-2527
access.redhat.com/errata/RHSA-2010:0577
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0577.json
cve.org/CVERecord?id=CVE-2010-2500