Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freetype | Jul 30, 2024 | Feb 8, 2015 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Feb 8, 2015 |
| Oracle Solaris | — | Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3Upgrade system/library/freetype-2 to version 2.5.5-0.175.2.10.0.3.1434 on Solaris 11.2 | May 29, 2017 | Feb 8, 2015 |
| Suse | — | Upgrade ft2demosUpgrade ftlintUpgrade ftinspectUpgrade libfreetype6-32bitUpgrade ftmultiUpgrade ftdiffUpgrade freetype2-32bitUpgrade freetype2Upgrade ftdumpUpgrade ftstringUpgrade ftviewUpgrade ftgammaUpgrade ftvalidUpgrade freetype2-x86Upgrade ftgridUpgrade ftbenchUpgrade libfreetype6Upgrade freetype2-develUpgrade freetype2-devel-32bit | Dec 18, 2015 | Feb 8, 2015 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Feb 8, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub