Astra Linux – Vulnerability in Freetype

A out-of-bounds write exists in FreeType versions 2.13.0 and below earlier versions of FreeType are not vulnerable. This issue occurs when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned...