CVE-2012-1126

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows...

10.0 HighFix available

CVE-2012-1126 is a high vulnerability (CVSS 10.0) in Freetype, published April 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.57%, the 92nd percentile. Fixed in freetype 2.4.9-1.

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.

Exploit likelihood

5.57%Down 2.7 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2012-1126
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Record: CVE-2012-1126
Updated: 2026-11-02

EUVDEUVD-2012-1160 No score

Record: EUVD-2012-1160
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rjgx-9m76-3q4j No score

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows...

Record: GHSA-rjgx-9m76-3q4j
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Record: CVE-2012-1126
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-1126 No score

Record: DEBIAN-CVE-2012-1126
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10438-1 No score

freetype2-devel-2.7-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10438-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`freetype` Debian:12	before 2.4.9-1	2.4.9-1
`freetype` Debian:13	before 2.4.9-1	2.4.9-1
`freetype` Debian:14	before 2.4.9-1	2.4.9-1
`freetype` Red Hat:enterprise_linux:5::client	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-debuginfo` Red Hat:enterprise_linux:5::client	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-demos` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype` Red Hat:enterprise_linux:5::server	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1

Show 20 moreShow less

Affected packages
Package	Affected	Fixed
`freetype-debuginfo` Red Hat:enterprise_linux:5::server	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-demos` Red Hat:enterprise_linux:5::server	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype-devel` Red Hat:enterprise_linux:5::server	before 0:2.2.1-31.el5_8.1	0:2.2.1-31.el5_8.1
`freetype` Red Hat:enterprise_linux:6::client	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-demos` Red Hat:enterprise_linux:6::client	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-devel` Red Hat:enterprise_linux:6::client	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype` Red Hat:enterprise_linux:6::computenode	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-demos` Red Hat:enterprise_linux:6::computenode	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype` Red Hat:enterprise_linux:6::server	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-devel` Red Hat:enterprise_linux:6::server	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-demos` Red Hat:enterprise_linux:6::server	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype` Red Hat:enterprise_linux:6::workstation	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype-demos` Red Hat:enterprise_linux:6::workstation	before 0:2.3.11-6.el6_2.9	0:2.3.11-6.el6_2.9
`freetype2` openSUSE:Tumbleweed	before 2.7-1.1	2.7-1.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 132 moreShow less