Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-2754

Fixed in a distro release EPSS 6%

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.

Published 2007-05-17 · CVE record · OSV

Products: freetype

Distro releases

ReleasePackageFixed in
Debian 12freetype2.2.1-6
Debian 13freetype2.2.1-6
Debian 14freetype2.2.1-6
Debian 3.1freetype2.1.7-8
Debian 4.0freetype2.2.1-5+etch1
Red Hat Enterprise Linux 2.1freetype0:2.0.3-17.el21
Red Hat Enterprise Linux 2.1freetype0:2.0.3-10.el21
Red Hat Enterprise Linux 2.1freetype-devel0:2.0.3-10.el21
Red Hat Enterprise Linux 2.1freetype-devel0:2.0.3-17.el21
Red Hat Enterprise Linux 2.1freetype-utils0:2.0.3-17.el21
Red Hat Enterprise Linux 2.1freetype-utils0:2.0.3-10.el21
Red Hat Enterprise Linux 3freetype0:2.1.4-7.el3
Red Hat Enterprise Linux 3freetype0:2.1.4-12.el3
Red Hat Enterprise Linux 3freetype-debuginfo0:2.1.4-12.el3
Red Hat Enterprise Linux 3freetype-debuginfo0:2.1.4-7.el3
Red Hat Enterprise Linux 3freetype-devel0:2.1.4-7.el3
Red Hat Enterprise Linux 3freetype-devel0:2.1.4-12.el3
Red Hat Enterprise Linux 4freetype0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype0:2.1.9-6.el4
Red Hat Enterprise Linux 4freetype-debuginfo0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-debuginfo0:2.1.9-6.el4
Red Hat Enterprise Linux 4freetype-demos0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-demos0:2.1.9-6.el4
Red Hat Enterprise Linux 4freetype-devel0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-devel0:2.1.9-6.el4
Red Hat Enterprise Linux 4freetype-utils0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-utils0:2.1.9-6.el4
Red Hat Enterprise Linux 5freetype0:2.2.1-19.el5
Red Hat Enterprise Linux 5freetype-debuginfo0:2.2.1-19.el5
Red Hat Enterprise Linux 5freetype-demos0:2.2.1-19.el5
Red Hat Enterprise Linux 5freetype-devel0:2.2.1-19.el5