- Packages tracked
- 38,394
- CVEs found
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Pending
- 700
728 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2010-2498 | debian/freetype | The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file tha | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2499 | debian/freetype | Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2500 | debian/freetype | Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2519 | debian/freetype | Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2520 | debian/freetype | Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2527 | debian/freetype | Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2541 | debian/freetype | Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2805 | debian/freetype | The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2806 | debian/freetype | Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based b | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2807 | debian/freetype | FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-2808 | debian/freetype | Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-3053 | debian/freetype | bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-3054 | debian/freetype | Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-3311 | debian/freetype | Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-3814 | debian/freetype | Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2010-3855 | debian/freetype | Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-0226 | debian/freetype | Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted T | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-3256 | debian/freetype | FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2011-3439 | debian/freetype | FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1126 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1127 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1128 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1129 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1130 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1131 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1132 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1133 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1134 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1135 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueTyp | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1136 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODIN | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1137 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1138 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1139 | debian/freetype | Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1140 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1141 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1142 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1143 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-1144 | debian/freetype | FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-5668 | debian/freetype | FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-5669 | debian/freetype | The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2012-5670 | debian/freetype | The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-2240 | debian/freetype | Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-2241 | debian/freetype | The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9656 | debian/freetype | The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9657 | debian/freetype | The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9658 | debian/freetype | The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9659 | debian/freetype | cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9660 | debian/freetype | The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9661 | debian/freetype | type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font. | - | Awaiting approval | Evidence | None recorded |
| DEBIAN-CVE-2014-9662 | debian/freetype | cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font. | - | Awaiting approval | Evidence | None recorded |