2 matches found
SUSE CVE-2014-9663
The ttcmap4validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted cmap SF...
7.5CVSS7.5AI score0.05059EPSS
SaveExploits1References5
PT-2015-4336
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt cmap4 validate function in sfnt/ttcmap.c, which validates a certain length field before its value is completely calculated. This allows remote attackers to cause a...
7.5CVSS0.07687EPSS
SaveExploits11References202
20