- Packages tracked
- 38,394
- Advisory records
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Awaiting triage
- 700
- Awaiting approval
- 0
1 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2016-10244 | debian/freetype | The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file. | - | Awaiting triage | Evidence | None recorded |