The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freetype | Jul 30, 2024 | Sep 14, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freetype-develUpgrade freetype | Dec 4, 2019 | Sep 14, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freetypeUpgrade freetype-devel | Dec 18, 2019 | Sep 14, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freetype-develUpgrade freetype | Nov 19, 2019 | Sep 14, 2015 |
| Oracle Solaris | — | Upgrade system/library/freetype-2 to version 2.5.5-0.175.2.10.0.3.1434 on Solaris 11.2Upgrade consolidation/X/X-incorporation to version 0.5.11-0.175.3.0.0.30.1483 on Solaris 11.3 | May 29, 2017 | Sep 14, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 14, 2014 |
| Suse | — | Upgrade freetype2-develUpgrade freetype2-devel-32bitUpgrade ft2demosUpgrade freetype2-32bitUpgrade freetype2-x86Upgrade freetype2 | Dec 18, 2015 | Sep 14, 2015 |
| Ubuntu | — | Upgrade libfreetype6 | Nov 8, 2024 | Sep 14, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub