Vulnerabilities (CVE)

Filtered by vendor Freetype Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-15999 5 Debian, Fedoraproject, Freetype and 2 more 5 Debian Linux, Fedora, Freetype and 2 more 2022-01-28 4.3 MEDIUM 6.5 MEDIUM
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-6942 2 Canonical, Freetype 2 Ubuntu Linux, Freetype 2021-01-26 4.3 MEDIUM 6.5 MEDIUM
An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.
CVE-2015-9382 2 Debian, Freetype 2 Debian Linux, Freetype 2019-09-10 4.3 MEDIUM 6.5 MEDIUM
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
CVE-2015-9383 2 Debian, Freetype 2 Debian Linux, Freetype 2019-09-10 4.3 MEDIUM 6.5 MEDIUM
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.