MGASA-2014-0526
Updated freetype2 packages fix security vulnerability
Updated freetype2 packages fix security vulnerability:
It was reported that Freetype before 2.5.4 suffers from an out-of-bounds stack-based read/write flaw in cf2_hintmap_build() in the CFF rasterizing code, which could lead to a buffer overflow. This is due to an incomplete fix for CVE-2014-2240.
What each source reports
OSV No score
Updated freetype2 packages fix security vulnerability
Updated freetype2 packages fix security vulnerability:
It was reported that Freetype before 2.5.4 suffers from an out-of-bounds stack-based read/write flaw in cf2_hintmap_build() in the CFF rasterizing code, which could lead to a buffer overflow. This is due to an incomplete fix for CVE-2014-2240.
- Record
MGASA-2014-0526- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2014-0526 is a vulnerability with no CVSS score yet in freetype2, published December 13, 2014. No source lists public exploit code. Fixed in freetype2 2.5.0.1-3.2.mga4.