Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx X11 | — | Apply OS X security update 2009-001 | Dec 16, 2011 | May 23, 2006 |
| Centos_linux | — | Upgrade freetype-demosUpgrade freetypeUpgrade freetype-utilsUpgrade freetype-devel | Dec 1, 2016 | May 23, 2006 |
| Debian | — | Upgrade freetype | Jul 30, 2024 | May 23, 2006 |
| Freebsd | — | Upgrade freetype2 | Dec 10, 2025 | Oct 2, 2006 |
| Gentoo Linux | — | Upgrade net-misc/nxnode.Upgrade net-misc/nx.Upgrade media-libs/freetype. | Oct 30, 2017 | May 23, 2006 |
| Suse | — | Upgrade freetype2-x86Upgrade freetype2Upgrade XFree86-serverUpgrade suse-releaseUpgrade freetype2-32bitUpgrade freetype2-devel-32bitUpgrade freetype2-64bitUpgrade freetype2-devel-64bitUpgrade freetype2-develUpgrade NX | Feb 17, 2015 | May 23, 2006 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | May 23, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub