freetype vulnerabilities (Ubuntu)
40 vulnerabilities.
-
freetypeUbuntu Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader 5.5 Medium -
freetypeUbuntu An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit... 6.5 Medium -
freetypeUbuntu An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in... 5.3 Medium -
freetypeUbuntu An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font... 8.1 High -
freetypeUbuntu An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in... 7.5 High -
freetypeUbuntu ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. 7.8 High -
freetypeUbuntu FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation... 7.5 High -
freetypeUbuntu FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation... 7.5 High -
freetypeUbuntu FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer... 9.8 Critical -
freetypeUbuntu Heap buffer overflow in CefSharp 9.6 Critical -
freetypeUbuntu FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. 6.5 Medium -
freetypeUbuntu FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
freetypeUbuntu FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
freetypeUbuntu FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow... 9.8 Critical -
freetypeUbuntu FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow... 9.8 Critical -
freetypeUbuntu FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow... 9.8 Critical -
freetypeUbuntu The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a... 7.8 High -
freetypeUbuntu The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly... 7.5 High -
freetypeUbuntu The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in... 9.8 Critical -
freetypeUbuntu The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to... 5.0 Medium -
freetypeUbuntu bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial... 5.0 Medium -
freetypeUbuntu The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with... 7.5 High -
freetypeUbuntu Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType... 6.8 Medium -
freetypeUbuntu Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows... 5.8 Medium -
freetypeUbuntu Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4... 4.3 Medium -
freetypeUbuntu Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType... 4.3 Medium -
freetypeUbuntu Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to... 6.8 Medium -
freetypeUbuntu The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length... 7.5 High -
freetypeUbuntu sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without... 6.8 Medium -
freetypeUbuntu The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count... 6.8 Medium -
freetypeUbuntu The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows... 7.5 High -
freetypeUbuntu FreeType before 2.5.4 does not check for the end of the data during certain parsing actions,... 6.8 Medium -
freetypeUbuntu The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain... 7.5 High -
freetypeUbuntu cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation... 7.5 High -
freetypeUbuntu type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete... 7.5 High -
freetypeUbuntu The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle... 7.5 High -
freetypeUbuntu cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with... 7.5 High -
freetypeUbuntu The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect... 7.5 High -
freetypeUbuntu The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish... 7.5 High -
freetypeUbuntu The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not... 7.5 High