2 matches found
PT-2015-4339
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt sbit decoder init function in sfnt/ttsbit.c, which does not restrict the count value, leading to a potential denial of service due to integer overflow and out-of-bound...
7.5CVSS0.0571EPSS
SaveExploits9References173
PT-2015-4329
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt sbit decoder load image function in sfnt/ttsbit.c, which does not properly check for an integer overflow. This allows remote attackers to cause a denial of service...
7.5CVSS0.07687EPSS
SaveExploits10References196
20