FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freetype | Aug 30, 2017 | Apr 25, 2012 |
| Centos_linux | — | Upgrade freetype-develUpgrade freetypeUpgrade freetype-demos | Dec 1, 2016 | Apr 25, 2012 |
| Debian | — | Upgrade freetype | Jul 30, 2024 | Apr 25, 2012 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-firefoxUpgrade seamonkeyUpgrade freetype2 | Dec 10, 2025 | Apr 24, 2012 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Apr 25, 2012 |
| Mfsa2012 21 | — | Upgrade to Mozilla Firefox version 10.0.4 | Jun 14, 2012 | Apr 25, 2012 |
| Oracle Solaris | — | Upgrade system/library/freetype-2 to version 2.4.9-0.175.0.8.0.2.1226 on Solaris 11.0 | May 29, 2017 | Apr 25, 2012 |
| Oracle_linux | — | Upgrade freetype-develUpgrade freetypeUpgrade freetype-demos | Oct 16, 2024 | Apr 25, 2012 |
| Suse | — | Upgrade freetype2Upgrade freetype2-32bitUpgrade freetype2-x86Upgrade ft2demosUpgrade libfreetype6-32bitUpgrade freetype2-profile-tti35Upgrade libfreetype6Upgrade ftdumpUpgrade freetype2-devel-32bitUpgrade freetype2-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Apr 25, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub