CVE-2010-3054
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote...
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
CVE-2010-3054- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
CVE-2010-3054- Updated
- 2026-11-02
EUVDEUVD-2010-3056 No score
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
EUVD-2010-3056- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ppwg-2jjq-44w4 No score
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote...
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
GHSA-ppwg-2jjq-44w4- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
CVE-2010-3054- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3054 No score
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
- Record
DEBIAN-CVE-2010-3054- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10172-1 No score
ft2demos-2.7-1.1 on GA media
These are all security issues fixed in the ft2demos-2.7-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10172-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10438-1 No score
freetype2-devel-2.7-1.1 on GA media
These are all security issues fixed in the freetype2-devel-2.7-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10438-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freetypeDebian:12 |
before 2.4.2-1 | 2.4.2-1 |
freetypeDebian:13 |
before 2.4.2-1 | 2.4.2-1 |
freetypeDebian:14 |
before 2.4.2-1 | 2.4.2-1 |
freetypeRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetypeRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetypeRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
freetype-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetypeRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetype-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 0:2.1.4-18.el3 | 0:2.1.4-18.el3 |
freetypeRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetypeRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetypeRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetypeRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-demosRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetype-utilsRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.1.9-17.el4.8 | 0:2.1.9-17.el4.8 |
freetypeRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-demosRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetypeRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetypeRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-demosRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
freetype-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:2.2.1-28.el5_5 | 0:2.2.1-28.el5_5 |
ft2demosopenSUSE:Tumbleweed From an advisory covering 32 CVEs |
before 2.7-1.1 | 2.7-1.1 |
freetype2openSUSE:Tumbleweed From an advisory covering 55 CVEs |
before 2.7-1.1 | 2.7-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3054 is a medium vulnerability (CVSS 5.0) in Freetype, published August 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.33%, the 88th percentile. Fixed in freetype 2.4.2-1.
References
vupen.com/english/advisories/2010/3045
support.apple.com/kb/HT4435
bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019
securityfocus.com/bid/42621
Show 87 moreShow less
rhn.redhat.com/errata/RHSA-2010-0737.html
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
secunia.com/advisories/42317
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2010-3054
github.com/advisories/GHSA-ppwg-2jjq-44w4
security-tracker.debian.org/tracker/CVE-2010-3054
access.redhat.com/errata/RHSA-2010:0736
bugzilla.redhat.com/show_bug.cgi?id=621980
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0736.json
cve.org/CVERecord?id=CVE-2010-2806
suse.com/security/cve/CVE-2009-0946