103 matches found
Heap-buffer-overflow in Mac_Read_sfnt_Resource
Project: https://github.com/freetype/freetype2-testing.git...
FreeType 'sfnt/ttsbit.c' Heap Buffer Overflow Vulnerability
FreeType is a C-based , high-quality and portable open source font engine library , it can be used to rasterize characters and mapped to bitmap and other font-related business support . A heap buffer overflow vulnerability exists in FreeType, which can be exploited by a remote attacker to constru...
CVE-2015-6781
Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...
Integer overflow
Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...
UBUNTU-CVE-2015-6781
Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...
CVE-2015-6781
Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...
CVE-2015-6781
Integer overflow in the FontData::Bound function in data/fontdata.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT...
CVE-2015-6781
Removed by vendor...
FreeType 'sfnt/ttcmap.c' Heap Buffer Overflow Vulnerability
FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A remote heap buffer overflow vulnerability exists in FreeType. Due to...
freetype: multiple integer overflows leading to buffer over-reads in cmap handling
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service out-of-bounds read or memory corruption or possibly have unspecified other impact via a crafted cmap SFNT table...
freetype: out-of-bounds read in tt_cmap4_validate()
The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...
FreeType 'sfnt/ttload.c' Denial of Service Vulnerability
FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A denial of service vulnerability exists in FreeType 'sfnt/ttload.c'...
FreeType 'tt_cmap4_validate' Function Denial of Service Vulnerability
FreeType is the FreeType team developed a C-based , high-quality and portable open source font engine library , it can be used to rasterize the characters and mapped to bitmap and provide other font-related business support . A denial of service vulnerability exists in the FreeType...
DEBIAN-CVE-2014-9669
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service out-of-bounds read or memory corruption or possibly have unspecified other impact via a crafted cmap SFNT table...
CVE-2014-9667
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...
DEBIAN-CVE-2014-9667
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...
CVE-2014-9663
The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...
Integer overflow
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via a crafted SFNT table...
Out-of-bounds
The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...
Integer overflow
The ttsbitdecoderinit function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via ...