CVE-2016-10328
Fixed in a distro release EPSS 4%
FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c.
Products: freetype, oracle outside_in_technology
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | freetype2 | 2.7.1-1 |
| Arch Linux | lib32-freetype2 | 2.7.1-1 |
| SUSE Linux Enterprise Server 11 SP4 | freetype2 | 2.3.7-25.45.8.1 |
| SUSE Linux Enterprise Server 11 SP4 | ft2demos | 2.3.7-25.45.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | freetype2 | 2.3.7-25.45.8.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ft2demos | 2.3.7-25.45.8.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | freetype2 | 2.3.7-25.45.8.1 |
| Ubuntu 14.04 LTS | freetype | 2.5.2-1ubuntu2.7 |
| Ubuntu 16.04 LTS | freetype | 2.6.1-0.1ubuntu2.2 |