The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freetype | Jul 30, 2024 | Jan 24, 2013 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Jan 24, 2013 |
| Oracle Solaris | — | Upgrade system/library/freetype-2 to version 2.4.11-0.175.1.18.0.1.1350 on Solaris 11.1 | May 29, 2017 | Jan 24, 2013 |
| Suse | — | Upgrade ftgridUpgrade freetype2-x86Upgrade libfreetype6Upgrade ftinspectUpgrade ftmultiUpgrade ftvalidUpgrade ftgammaUpgrade ft2demosUpgrade ftstringUpgrade freetype2-profile-tti35Upgrade ftbenchUpgrade ftsdfUpgrade ftviewUpgrade freetype2-develUpgrade freetype2-32bitUpgrade ftlintUpgrade freetype2Upgrade freetype2-devel-32bitUpgrade ftdiffUpgrade libfreetype6-32bitUpgrade ftdump | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Jan 24, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub