6.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
75.1%
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd
lists.debian.org/debian-lts-announce/2019/09/msg00002.html
savannah.nongnu.org/bugs/?46346
usn.ubuntu.com/4126-1/
usn.ubuntu.com/4126-2/