CVE-2014-9667

Fixed in a distro release EPSS 3%

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.

Published 2015-02-08 · CVE record · OSV

Products: debian_linux, canonical ubuntu_linux, fedoraproject fedora, freetype, opensuse, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation

Distro releases