Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2011-006Upgrade macOS to the latest version | Aug 28, 2015 | Jul 19, 2011 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jul 19, 2011 |
| Debian | — | Upgrade freetype | Jul 30, 2024 | Jul 19, 2011 |
| Freebsd | — | Upgrade freetype2 | Dec 10, 2025 | Aug 11, 2011 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Jul 19, 2011 |
| Oracle_linux | — | Upgrade freetype-develUpgrade freetypeUpgrade freetype-demos | Oct 16, 2024 | Jul 19, 2011 |
| Suse | — | Upgrade ftsdfUpgrade freetype2-32bitUpgrade freetype2-develUpgrade ftinspectUpgrade freetype2-devel-32bitUpgrade ftlintUpgrade ftdumpUpgrade libfreetype6-32bitUpgrade ftdiffUpgrade freetype2-x86Upgrade freetype2-profile-tti35Upgrade libfreetype6Upgrade ft2demosUpgrade freetype2Upgrade ftgammaUpgrade ftmultiUpgrade ftbenchUpgrade ftgridUpgrade ftstringUpgrade ftviewUpgrade ftvalid | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Jul 19, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub