The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade freetypeUpgrade freetype-demosUpgrade freetype-devel | Dec 1, 2016 | Feb 8, 2015 |
| Debian | — | Upgrade freetype | Jul 30, 2024 | Feb 8, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 9, 2015 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Feb 8, 2015 |
| Oracle Solaris | — | Upgrade system/library/freetype-2 to version 2.5.5-0.175.2.10.0.3.1434 on Solaris 11.2Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3 | May 29, 2017 | Feb 8, 2015 |
| Oracle_linux | — | Upgrade freetypeUpgrade freetype-demosUpgrade freetype-devel | Oct 16, 2024 | Feb 8, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 8, 2015 |
| Suse | — | Upgrade ftlintUpgrade ftdumpUpgrade freetype2-32bitUpgrade ftinspectUpgrade freetype2-devel-32bitUpgrade ftdiffUpgrade libfreetype6-32bitUpgrade freetype2-develUpgrade ftvalidUpgrade ft2demosUpgrade libfreetype6Upgrade ftstringUpgrade ftmultiUpgrade ftviewUpgrade freetype2Upgrade freetype2-x86Upgrade ftbenchUpgrade ftgridUpgrade ftgamma | Dec 18, 2015 | Feb 8, 2015 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Feb 8, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub