Lucene search

K
cvelistMitreCVELIST:CVE-2014-9658
HistoryFeb 08, 2015 - 11:00 a.m.

CVE-2014-9658

2015-02-0811:00:00
mitre
raw.githubusercontent.com
4

7 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.