FreeType 'sfnt/ttsbit.c' Heap Buffer Overflow Vulnerability

FreeType is a C-based , high-quality and portable open source font engine library , it can be used to rasterize characters and mapped to bitmap and other font-related business support . A heap buffer overflow vulnerability exists in FreeType, which can be exploited by a remote attacker to constru...

CVE-2014-9656

The ttsbitdecoderloadimage function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted OpenType font...

UBUNTU-CVE-2014-9666

The ttsbitdecoderinit function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via ...