Every CVESearch/Get API key

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and...

9.3 HighFix available

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Exploit likelihood

3.77%Down 2.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used9.3

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
CVE-2012-1139
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
CVE-2012-1139
Updated
2026-11-02
EUVDEUVD-2012-1173No score

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
EUVD-2012-1173
Updated
2026-11-03
GitHub AdvisoriesGHSA-c8fh-cq7g-679pNo score

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and...

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
GHSA-c8fh-cq7g-679p
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
CVE-2012-1139
Updated
2026-11-02
OSVDEBIAN-CVE-2012-1139No score

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

Record
DEBIAN-CVE-2012-1139
Updated
2026-11-02
OSVopenSUSE-SU-2024:10438-1No score

freetype2-devel-2.7-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10438-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freetype
Debian:12
before 2.4.9-1
2.4.9-1
freetype
Debian:13
before 2.4.9-1
2.4.9-1
freetype
Debian:14
before 2.4.9-1
2.4.9-1
freetype
Red Hat:enterprise_linux:5::client
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-demos
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
Show 20 moreShow less
Affected packages
PackageAffectedFixed
freetype-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-demos
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 14 CVEs
before 0:2.2.1-31.el5_8.1
0:2.2.1-31.el5_8.1
freetype
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-demos
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-demos
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-demos
Red Hat:enterprise_linux:6::server
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype-demos
Red Hat:enterprise_linux:6::workstation
From an advisory covering 14 CVEs
before 0:2.3.11-6.el6_2.9
0:2.3.11-6.el6_2.9
freetype2
openSUSE:Tumbleweed
From an advisory covering 55 CVEs
before 2.7-1.1
2.7-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1139 is a high vulnerability (CVSS 9.3) in Freetype, published April 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.77%, the 90th percentile. Fixed in freetype 2.4.9-1.

References

Show 132 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open