OSV-2018-219 UNKNOWN READ in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9527 Crash type: UNKNOWN READ Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

OSV-2018-24 Heap-buffer-overflow in pcf_get_encodings

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9608 Crash type: Heap-buffer-overflow READ 1 Crash state: pcfgetencodings pcfloadfont PCFFaceInit...

freetype2/ftfuzzer: Heap-buffer-overflow in pcf_get_encodings

Detailed report: https://oss-fuzz.com/testcase?key=5000847376252928 Project: freetype2 Fuzzer: aflfreetype2ftfuzzer Fuzz target binary: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000008401 Crash State: pcfgetencodings...

CVE-2014-9670

Multiple integer signedness errors in the pcfgetencodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service integer overflow, NULL pointer dereference, and application crash via a crafted PCF file that specifies negative values for the first...