OSV-2018-142 UNKNOWN READ in cff_decoder_parse_charstrings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11157 Crash type: UNKNOWN READ Crash state: cffdecoderparsecharstrings cffslotload FTLoadGlyph...

freetype2/cff-ftengine: Crash in cff_decoder_parse_charstrings

Detailed report: https://oss-fuzz.com/testcase?key=5709686410575872 Project: freetype2 Fuzzer: libFuzzerfreetype2cff-ftengine Fuzz target binary: cff-ftengine Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fa03f210910 Crash State:...

CVE-2010-1797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...