2 matches found
MGASA-2020-0389 Updated freetype2 packages fix security vulnerability
A heap buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyphs can cause a heap buffer overflow in LoadSBitPng as libpng uses the original 32-bit values, which are saved in pngstruct. If the original width and/or height are greater than 65535, the...
9.6CVSS9.6AI score0.44303EPSS
SaveExploits2References4
SWFTools Denial of Service Vulnerability (CNVD-2017-15100)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in version 2013-04-09-1007 of SWFTools for Windows-based platforms. A remote attacker can exploit this vulnerability to cause a denial of service with malformed TTF files...
6.5CVSS6.8AI score0.00876EPSS
SaveExploits0References1
20