CVE-2015-9383
Fixed in a distro release EPSS 2%
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
Products: freetype, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | freetype | 2.6.3-1 |
| Debian 13 | freetype | 2.6.3-1 |
| Debian 14 | freetype | 2.6.3-1 |
| Debian 8 | freetype | 2.5.2-3+deb8u4 |
| Ubuntu 16.04 LTS | freetype | 2.6.1-0.1ubuntu2.4 |
| Ubuntu Pro 14.04 LTS | freetype | 2.5.2-1ubuntu2.8+esm1 |