FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freetype | Jul 30, 2024 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freetypeUpgrade freetype-devel | Dec 4, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freetypeUpgrade freetype-devel | Dec 18, 2019 | Sep 3, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freetype-develUpgrade freetype | Nov 19, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade x11/library/libxrender to version 0.9.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxfixes to version 5.0.1-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxrandr to version 1.4.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxi to version 1.7.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxvmc to version 1.0.8-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libx11 to version 1.6.2-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxv to version 1.0.10-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade system/library/fontconfig to version 2.12.1-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade system/library/freetype-2 to version 2.6.3-0.175.3.15.0.3.1517 on Solaris 11.3Upgrade x11/library/libxtst to version 1.2.2-0.175.3.15.0.3.1517 on Solaris 11.3 | Oct 16, 2019 | Sep 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 3, 2019 |
| Ubuntu | — | Upgrade libfreetype6 (Ubuntu Pro)Upgrade libfreetype6 | Sep 10, 2019 | Sep 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub