Freetype: >> Freetype Security Vulnerabilities
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
CVSS Score
4.0
EPSS Score
0.0
Published
2025-01-10
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-04-22
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-22
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-04-22
CVE-2020-15999
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Known exploited
CVSS Score
9.6
EPSS Score
0.931
Published
2020-11-03
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
CVSS Score
8.8
EPSS Score
0.007
Published
2019-09-03
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
CVSS Score
6.5
EPSS Score
0.008
Published
2019-09-03
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
CVSS Score
6.5
EPSS Score
0.013
Published
2019-09-03
In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-07-30
An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.
CVSS Score
6.5
EPSS Score
0.003
Published
2018-02-13
Page 1