Every CVE Search/ Get API key

MGASA-2015-0367

Updated freetype2 packages fix security vulnerabilities

No scoreFix available

Updated freetype2 packages fix security vulnerabilities:

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory (Savannah bugs 41309 and 41590).

What each source reports

OSV No score

Updated freetype2 packages fix security vulnerabilities

Updated freetype2 packages fix security vulnerabilities:

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory (Savannah bugs 41309 and 41590).

Record
MGASA-2015-0367
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
freetype2
Mageia:4
before 2.5.0.1-3.4.mga4
2.5.0.1-3.4.mga4
freetype2
Mageia:4
before 2.5.0.1-3.4.mga4.tainted
2.5.0.1-3.4.mga4.tainted

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2015-0367 is a vulnerability with no CVSS score yet in freetype2, published September 13, 2015. No source lists public exploit code. Fixed in freetype2 2.5.0.1-3.4.mga4.

References

MoveEnter Open