Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
FreetypeFreetype2.4.1

27 matches found

CVE
CVE•added 2010/11/26 8:0 p.m.•81 views

CVE-2010-3855

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

6.8CVSS6.4AI score0.07756EPSS
CVE
CVE•added 2011/07/19 10:55 p.m.•78 views

CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted ...

9.3CVSS8.7AI score0.0845EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•67 views

CVE-2012-1134

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font.

9.3CVSS7.8AI score0.05858EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•64 views

CVE-2012-1133

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.

9.3CVSS7.8AI score0.03525EPSS
CVE
CVE•added 2010/11/26 8:0 p.m.•63 views

CVE-2010-3814

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wi...

6.8CVSS6.3AI score0.05648EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•62 views

CVE-2012-1128

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

9.3CVSS7.7AI score0.02697EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•60 views

CVE-2012-1138

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.

9.3CVSS7.7AI score0.03525EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•60 views

CVE-2012-1141

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•60 views

CVE-2012-1142

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.

9.3CVSS7.8AI score0.04956EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•60 views

CVE-2012-1144

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

9.3CVSS7.7AI score0.03906EPSS
CVE
CVE•added 2013/01/24 9:55 p.m.•60 views

CVE-2012-5668

FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.

4.3CVSS6.1AI score0.02815EPSS
CVE
CVE•added 2014/03/12 2:55 p.m.•60 views

CVE-2014-2240

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

7.5CVSS7.8AI score0.02785EPSS
CVE
CVE•added 2010/08/19 6:0 p.m.•59 views

CVE-2010-3054

Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.

5CVSS8.8AI score0.03893EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•59 views

CVE-2012-1132

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•59 views

CVE-2012-1135

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueTy...

9.3CVSS7.7AI score0.03525EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•58 views

CVE-2012-1136

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODI...

9.3CVSS7.8AI score0.04956EPSS
CVE
CVE•added 2013/01/24 9:55 p.m.•58 views

CVE-2012-5669

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.

4.3CVSS7.2AI score0.01687EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•57 views

CVE-2012-1126

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font.

10CVSS7.7AI score0.03427EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•57 views

CVE-2012-1140

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•55 views

CVE-2012-1130

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•55 views

CVE-2012-1131

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•55 views

CVE-2012-1137

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•53 views

CVE-2012-1143

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.

4.3CVSS6.1AI score0.02148EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•48 views

CVE-2012-1127

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•47 views

CVE-2012-1139

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

9.3CVSS7.7AI score0.02967EPSS
CVE
CVE•added 2013/01/24 9:55 p.m.•45 views

CVE-2012-5670

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.

4.3CVSS6.2AI score0.02977EPSS
CVE
CVE•added 2012/04/25 10:10 a.m.•43 views

CVE-2012-1129

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font.

9.3CVSS7.7AI score0.02967EPSS