medium6.5
CVE-2015-9383
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
Impact
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freetype | Freetype | before 2.6.2 |
| Debian | Debian Linux | Version 8.0 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd
- https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html
- https://savannah.nongnu.org/bugs/?46346
- https://usn.ubuntu.com/4126-1/
- https://usn.ubuntu.com/4126-2/
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd
- https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html
- https://savannah.nongnu.org/bugs/?46346
- https://usn.ubuntu.com/4126-1/
- https://usn.ubuntu.com/4126-2/