SUSE CVE-2014-9658

The ttfaceloadkern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted TrueType font...

PT-2015-4330

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt face load hdmx function in truetype/ttpload.c, which does not establish a minimum record size. This allows remote attackers to cause a denial of service out-of-bounds...

PT-2015-4331

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt face load kern function in sfnt/ttkern.c, which enforces an incorrect minimum table length. This allows remote attackers to cause a denial of service out-of-bounds rea...