CVE-2014-9656

The ttsbitdecoderloadimage function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted OpenType font...

CVE-2014-9656

FreeType contains CVE-2014-9656 (and related 9657/9658/9659/9660/9661/etc. in the same family) vulnerabilities. The primary issue is integer overflow and related memory errors in the font parsing code, notably tt_sbit_decoder_load_image in sfnt/ttsbit.c, which could allow a remote attacker to cau...