Out-of-Bounds Write

🗓️ 16 May 2017 07:13:21Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 21 Views

FreeType out-of-bounds write vulnerability in t1_decoder_parse_charstrings functio

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in freetype2 (CVE-2017-8287 CVE-2017-8105 CVE-2016-10244)	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerabilities in freetype2 (CVE-2016-10244 CVE-2017-8105 CVE-2017-8287)	26 Jul 201820:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in freetype2 affect IBM Flex System Manager (FSM)	18 Jun 201801:42	–	ibm
FreeBSD	freetype2 -- buffer overflows	17 May 201700:00	–	freebsd
AlpineLinux	CVE-2017-8105	24 Apr 201718:00	–	alpinelinux
ArchLinux	[ASA-201705-10] lib32-freetype2: arbitrary code execution	10 May 201700:00	–	archlinux
ArchLinux	[ASA-201705-7] freetype2: arbitrary code execution	9 May 201700:00	–	archlinux
Cloud Foundry	USN-3282-1: FreeType vulnerabilities \| Cloud Foundry	2 Jun 201700:00	–	cloudfoundry
CNVD	FreeType 2 buffer overflow vulnerability (CNVD-2017-06712)	26 Apr 201700:00	–	cnvd
CVE	CVE-2017-8105	24 Apr 201718:00	–	cve

Vulners

Node

-freetype:3.5Match2.7-r2

OR

-freetype:3.3Match2.6.2-r0

OR

freetype freetypeRange≤2.8.0.1

Source	Link
github	www.github.com/1e1f/freetype/blob/50a3d0a4041b9e2586057662ea810bbad5b360c2/src/psaux/t1decode.c
bugzilla	www.bugzilla.novell.com/show_bug.cgi
git	www.git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/
securityfocus	www.securityfocus.com/bid/99093
debian	www.debian.org/security/2017/dsa-3839
security	www.security.gentoo.org/glsa/201706-14
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
oracle	www.oracle.com/security-alerts/cpuapr2020.html

26 Jan 2021 14:04Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 39.8

EPSS0.00966

freetype vulnerability out-of-bounds write t1_decoder_parse_charstrings heap-based buffer overflow