Astra Linux - уязвимость в freetype

It was discovered that the FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f contains a heap buffer overflow issue through the sfntinitface function...

EUVD-2017-16832

Malware in sbrugna...

EUVD-2017-16833

Malware in sbrugna...

FreeType: Buffer overflow in sfnt_init_face

A heap buffer overflow flaw was found in Freetype’s sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read a small amount of memory, causing the application to crash...

Medium: freetype

Issue Overview: A heap buffer overflow flaw was found in Freetype's sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read and modify a small amount of memory, causing the application to...

FreeType: Buffer overflow in sfnt_init_face

A heap buffer overflow flaw was found in Freetype’s sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read a small amount of memory, causing the application to crash...

FreeType: Buffer overflow in sfnt_init_face

A heap buffer overflow flaw was found in Freetype’s sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read a small amount of memory, causing the application to crash...

OSV-2022-686 Heap-use-after-free in FT_Stream_ReadULong

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49859 Crash type: Heap-use-after-free READ 1 Crash state: FTStreamReadULong sfntinitface ttfaceinit...

Denial Of Service (DoS)

FreeType is vulnerable to denial of service. The vulnerability exists in sfntinitface function due to a segment violation which allows an attacker to cause an application crash...

CVE-2022-27404

A heap buffer overflow flaw was found in Freetype’s sfntinitface function in the sfobjs.c file. The vulnerability occurs when creating a face with a strange file and invalid index. This flaw allows an attacker to read a small amount of memory, causing the application to crash...

AZL-9573 CVE-2022-27404 affecting package freetype for versions less than 2.11.1-2

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

Heap overflow

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

CVE-2022-27404

The CVE-2022-27404 issue is a heap buffer overflow in FreeType’s sfnt_init_face() triggered by a specific commit (1e2eb65048f75c64b68708efed6ce904c31f3b2f). Connected documents confirm FreeType/freetype as the affected component and describe the vulnerability as an out-of-bounds write in sfnt_ini...

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

FreeType 缓冲区错误漏洞

FreeType is an open source font rendering library written in the C language. A security vulnerability exists in FreeType, which stems from the commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was found to contain a heap buffer overflow via the function sfntinitface...

Arbtirary Code Execution

freetype is vulnerable to arbitrary code execution. An out-of-bounds write resulting in a heap-based buffer overflow in the TTGetMMVar function in truetype/ttgxvar.c and sfntinitface function in sfnt/sfobjs.c allows an attacker to execute arbitrary code on the host OS...