Denial Of Service (DoS)

freetype is vulnerable to denial of service. A heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c allows an attacker to crash the application...

FreeType buffer overflow vulnerability (CNVD-2019-31235)

FreeType is an open source font rendering library written in the C language. A buffer overflow vulnerability exists in ttcmap14validate in the sfnt/ttcmap.c file in versions prior to FreeType 2.6.2, which can be exploited by an attacker to cause a buffer overflow or heap overflow...

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...

Heap overflow

FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in ttcmap14validate in sfnt/ttcmap.c...

Microsoft Windows - Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

-----===== Background =====----- The Microsoft Font Subsetting DLL fontsub.dll is a default Windows helper library for subsetting TTF fonts; i.e. converting fonts to their more compact versions based on the specific glyphs used in the document where the fonts are embedded. It is used by Windows G...

Microsoft DirectWrite / AFDKO - Multiple Bugs in OpenType Font Handling Related to the _post_ Table

-----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library written in C, which provides interfaces for reading and writing Type 1, OpenType, TrueType to some...

Artifex Ghostscript GhostXPS Heap Buffer Overflow Vulnerability

Artifex Ghostscript is an open source PostScript a page description language and programming language for the electronics industry and desktop publishing parser from Artifex Software. Artifex Ghostscript A security vulnerability exists in the 'xpsloadsfntname' function of the xps/xpsfont.c file i...

FreeType 2 'TT_Get_MM_Var' Function Denial of Service Vulnerability

FreeType 2 is a C-based, portable open source font engine library that can be used to rasterize and map characters to bitmaps as well as provide support for other font-related operations. A security vulnerability exists in the 'sfntinitface' function in the sfnt/sfobjs.c file and the 'TTGetMMVar'...

CVE-2017-7857

FreeType 2 vulnerability CVE-2017-7857 involves an out-of-bounds write caused by a heap-based buffer overflow. The issue affects FreeType 2 prior to 2017-03-08 and is related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c. Connected sources co...

PT-2017-17959 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: FreeType 2 versions prior to 2017-03-07 Description: The issue is related to an out-of-bounds write in the TT Get MM Var function in truetype/ttgxvar.c and the sfnt init face function in sfnt/sfobjs.c. Recommendations: For versions prior to...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ByteArray::Get method in the Google Chrome browser component is due to buffer overflow in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other effects using a specially crafted SFNT font...

Google Chrome 'ByteArray::Get' method heap buffer overflow vulnerability

Google Chrome is a web browser developed by Google Google Inc. Google sfntly is one of the font toolkits for using, editing and creating SFNT-based fonts. Google sfntly used in versions of Google Chrome prior to 52.0.2743.82 The 'ByteArray::Get' method in the data/bytearray.cc file in versions...

UBUNTU-CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

Heap overflow

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...

CVE-2016-1709

Removed by vendor...

CVE-2016-1709

CVE-2016-1709 describes a heap-buffer-overflow in the ByteArray::Get method of data/byte_array.cc in Google sfntly, affecting Google Chrome prior to 52.0.2743.82 (sfntly used by Chrome). The vulnerability could allow a remote attacker to cause a denial of service or other unspecified impact via a...

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/bytearray.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font...