Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

freetype: off-by-one buffer over-read in tt_face_load_hdmx()

🗓️ 17 Mar 2015 17:58:06Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 1 Views

FreeType prior to 2.5.4 has off-by-one buffer over-read in tt_face_load_hdmx, enabling remote denial of service.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple freetype2 vulnerabilities
18 Jun 201801:32
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Vulnerabilities Fixed in IBM Security Privileged Identity Manager
16 Jun 201821:26
–ibm
IBM Security Bulletins		Security Bulletin: PowerKVM is affected by freetype vulnerabilities (Multiple CVEs)
18 Jun 201801:28
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in krb5, giflib and freetype2 affect IBM BladeCenter Advanced Management Module (AMM) and IBM Flex System Chassis Management Module (CMM)
14 Apr 202314:32
–ibm
Amazon		Important: freetype
1 Apr 201500:00
–amazon
Tenable Nessus		Amazon Linux AMI : freetype (ALAS-2015-502)
2 Apr 201500:00
–nessus
Tenable Nessus		CentOS 6 / 7 : freetype (CESA-2015:0696)
19 Mar 201500:00
–nessus
Tenable Nessus		Debian DLA-185-1 : freetype security update
1 Apr 201500:00
–nessus
Tenable Nessus		Debian DSA-3188-1 : freetype - security update
17 Mar 201500:00
–nessus
Tenable Nessus		F5 Networks BIG-IP : Multiple FreeType vulnerabilities (K16900)
31 May 201600:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux6i686freetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.i686.rpm
Red Hat Enterprise Linux6ppcfreetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.ppc.rpm
Red Hat Enterprise Linux6ppc64freetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.ppc64.rpm
Red Hat Enterprise Linux6s390freetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.s390.rpm
Red Hat Enterprise Linux6s390xfreetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.s390x.rpm
Red Hat Enterprise Linux6x86_64freetype0:2.3.11-15.el6_6.1freetype-0:2.3.11-15.el6_6.1.x86_64.rpm
Red Hat Enterprise Linux7ppc64lefreetype0:2.4.11-10.ael7b_1.1freetype-0:2.4.11-10.ael7b_1.1.ppc64le.rpm
Red Hat Enterprise Linux7i686freetype0:2.4.11-10.el7_1.1freetype-0:2.4.11-10.el7_1.1.i686.rpm
Red Hat Enterprise Linux7ppcfreetype0:2.4.11-10.el7_1.1freetype-0:2.4.11-10.el7_1.1.ppc.rpm
Red Hat Enterprise Linux7ppc64freetype0:2.4.11-10.el7_1.1freetype-0:2.4.11-10.el7_1.1.ppc64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2025 17:51Current
6Medium risk
Vulners AI Score6
CVSS 27.5
EPSS0.01688
CWE-125
off by one readbuffer overreadhdmx functioncrafted fontsremote denial
1