Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-9656
HistoryFeb 08, 2015 - 11:59 a.m.

CVE-2014-9656

2015-02-0811:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10

0.04 Low

EPSS

Percentile

92.0%

The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.