freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference

Off-by-one error in the pcfgetproperties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted PCF file with a 0xffffffff size value that is improperly incremented...

FreeType 'pcf_get_properties' Denial of Service Vulnerability

FreeType is a library of popular font functions. A denial of service vulnerability exists in FreeType 'pcfgetproperties' that allows remote attackers to launch a denial of service attack by crafting a PCF file...

PT-2015-4344

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to an off-by-one error in the pcf get properties function, which can be exploited by remote attackers to cause a denial of service. This is achieved by crafting a PCF file with ...