freetype vulnerabilities (Debian)
97 vulnerabilities.
-
freetypeDebian Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader 5.5 Medium -
freetypeDebian An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit... 6.5 Medium -
freetypeDebian An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in... 5.3 Medium -
freetypeDebian An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font... 8.1 High -
freetypeDebian ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. 7.8 High -
freetypeDebian FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation... 7.5 High -
freetypeDebian FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation... 7.5 High -
freetypeDebian FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer... 9.8 Critical -
freetypeDebian Heap buffer overflow in CefSharp 9.6 Critical -
freetypeDebian FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 6.5 Medium -
freetypeDebian FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
freetypeDebian FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
freetypeDebian In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function... 9.8 Critical -
freetypeDebian An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the... 6.5 Medium -
freetypeDebian FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow... 9.8 Critical -
freetypeDebian FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow... 9.8 Critical -
freetypeDebian freetype - security update No score -
freetypeDebian The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a... 7.8 High -
freetypeDebian The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly... 7.5 High -
freetypeDebian The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in... 9.8 Critical -
freetypeDebian The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to... 5.0 Medium -
freetypeDebian bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial... 5.0 Medium -
freetypeDebian The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with... 7.5 High -
freetypeDebian Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType... 6.8 Medium -
freetypeDebian Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows... 5.8 Medium -
freetypeDebian Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4... 4.3 Medium -
freetypeDebian Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType... 4.3 Medium -
freetypeDebian Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to... 6.8 Medium -
freetypeDebian The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length... 7.5 High -
freetypeDebian sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without... 6.8 Medium -
freetypeDebian The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count... 6.8 Medium -
freetypeDebian The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows... 7.5 High -
freetypeDebian FreeType before 2.5.4 does not check for the end of the data during certain parsing actions,... 6.8 Medium -
freetypeDebian The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain... 7.5 High -
freetypeDebian cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation... 7.5 High -
freetypeDebian type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete... 7.5 High -
freetypeDebian The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle... 7.5 High -
freetypeDebian cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with... 7.5 High -
freetypeDebian The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect... 7.5 High -
freetypeDebian The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish... 7.5 High -
freetypeDebian The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not... 7.5 High -
freetypeDebian The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in... 6.8 Medium -
freetypeDebian Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType... 7.5 High -
freetypeDebian The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to... 4.3 Medium -
freetypeDebian The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to... 4.3 Medium -
freetypeDebian FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL... 4.3 Medium -
freetypeDebian FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... 4.3 Medium -
freetypeDebian FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... 9.3 High -
freetypeDebian FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows... 9.3 High -
freetypeDebian Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and... 9.3 High - Show olderLoading…