Lucene search

K
cvelistMitreCVELIST:CVE-2014-9670
HistoryFeb 08, 2015 - 11:00 a.m.

CVE-2014-9670

2015-02-0811:00:00
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.