fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade fontconfig. | Aug 30, 2017 | Aug 12, 2016 |
| Debian | — | Upgrade fontconfig | Aug 8, 2016 | Aug 8, 2016 |
| Freebsd | — | Upgrade fontconfig | Dec 10, 2025 | Aug 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade fontconfig-develUpgrade fontconfig | Nov 30, 2017 | Aug 12, 2016 |
| Oracle Solaris | — | Upgrade x11/library/libxrender to version 0.9.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxi to version 1.7.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxtst to version 1.2.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrandr to version 1.4.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade system/library/freetype-2 to version 2.6.3-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxfixes to version 5.0.1-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxv to version 1.0.10-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxvmc to version 1.0.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade system/library/fontconfig to version 2.12.1-0.175.3.15.0.3.1517 on Solaris 11.3 | May 29, 2017 | Aug 12, 2016 |
| Oracle_linux | — | Upgrade fontconfig-develUpgrade fontconfig-devel-docUpgrade fontconfig | Nov 9, 2016 | Aug 5, 2016 |
| Redhat_linux | — | No solution existsUpgrade fontconfig-develUpgrade fontconfigUpgrade fontconfig-devel-docUpgrade fontconfig-debuginfo | Nov 4, 2016 | Aug 12, 2016 |
| Suse | — | Upgrade fontconfig-develUpgrade fontconfigUpgrade fontconfig-devel-32bitUpgrade fontconfig-32bitUpgrade fontconfig-x86 | Aug 30, 2016 | Aug 12, 2016 |
| Ubuntu | — | Upgrade fontconfigUpgrade libfontconfig1 | Aug 22, 2016 | Aug 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub