freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference

Multiple integer signedness errors in the pcfgetencodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service integer overflow, NULL pointer dereference, and application crash via a crafted PCF file that specifies negative values for the first...

Multiple integer overflow vulnerabilities in FreeType 'pcf_get_encodings'

FreeType is a library of popular font functions. Multiple integer overflow vulnerabilities in FreeType 'pcfgetencodings' allow remote attackers to launch a denial of service attack via a crafted PCF file that specifies negative values...