Lucene search
+L

7 matches found

Packet Storm News
Packet Storm News
•added 2026/06/15 12:00 a.m.•34 views

FreeType SHZ Heap Buffer Overflow Verification Tool

This C proof of concept is designed to validate the presence of a potential heap buffer overflow in the TrueType bytecode interpreter of the FreeType library. The program initializes FreeType, loads a user-supplied modified TrueType font file, explicitly enables the interpreter mode, and attempts...

5.9AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2026/06/15 12:00 a.m.•136 views

📄 FreeType SHZ 2.14.3 Heap Buffer Overflow

This Python proof of concept framework is designed for security research into a reported heap buffer overflow condition affecting the FreeType TrueType bytecode interpreter. The code constructs specially crafted font structures intended to exercise the SHZ instruction path, generates malformed...

5.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2010-3793

Malware in sbrugna...

6.8CVSS5.5AI score0.03885EPSS
SaveExploits0References20
SUSE CVE
SUSE CVE
•added 2023/02/15 5:56 a.m.•9 views

SUSE CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

6.8CVSS8.2AI score0.03885EPSS
SaveExploits0References6
OSV
OSV
•added 2010/11/26 8:00 p.m.•12 views

DEBIAN-CVE-2010-3814

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

6.8CVSS7.2AI score0.03885EPSS
SaveExploits0References1
Prion
Prion
•added 2010/11/26 8:00 p.m.•27 views

Heap overflow

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

6.8CVSS8.6AI score0.03885EPSS
SaveExploits0References17Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/11/26 12:00 a.m.•4 views

CVE-2010-3814: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...

6.8CVSS6.9AI score0.03885EPSS
SaveExploits0References2
Rows per page
Query Builder