Lucene search
Veracode Vulnerability DatabaseVERACODE:3970HistoryApr 26, 2017 - 4:43 a.m.
Out-of-Bounds Write
2017-04-2604:43:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.009 Low
EPSS
Percentile
83.1%
freetype is vulnerable to an out-of-bounds write. A malicious user can pass a cff font file to the application to cause a heap-based buffer overflow that can lead to an out-of-bounds write. This can cause the application to crash or overwrite values in the heap.
References
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3bd79cc257499f1850a1bace21f3ae371e3b40f0
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8
savannah.nongnu.org/bugs/?func=detailitem&item_id=49858
www.securityfocus.com/bid/97677
bugs.chromium.org/p/oss-fuzz/issues/detail?id=289
bugzilla.redhat.com/show_bug.cgi?id=1444895
security.gentoo.org/glsa/201706-14
www.oracle.com/security-alerts/cpuapr2020.html
Related
cve
cve
CVE-2016-10328
2017-04-14 04:59:00
nessus
nessus
Debian DLA-900-1 : freetype security update
2017-04-18 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : FreeType vulnerability (USN-3263-1)
2017-04-21 00:00:00
SUSE SLES11 Security Update : freetype2 (SUSE-SU-2018:0837-1)
2018-03-30 00:00:00
cloudfoundry
cloudfoundry
USN-3263-1: FreeType vulnerability | Cloud Foundry
2017-05-01 00:00:00
cvelist
cvelist
CVE-2016-10328
2017-04-14 04:30:00
openvas
openvas
Ubuntu: Security Advisory (USN-3263-1)
2017-04-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0837-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-918-1)
2018-01-16 00:00:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2016-10328
2017-04-14 00:00:00
debian
debian
[SECURITY] [DLA 900-1] freetype security update
2017-04-17 17:50:28
[SECURITY] [DLA 918-1] freetype security update
2017-04-26 15:51:04
prion
prion
Heap overflow
2017-04-14 04:59:00
osv
osv
CVE-2016-10328
2017-04-14 04:59:00
nvd
nvd
CVE-2016-10328
2017-04-14 04:59:00
redhatcve
redhatcve
CVE-2016-10328
2017-04-24 14:19:14
ubuntu
ubuntu
FreeType vulnerability
2017-04-21 00:00:00
debiancve
debiancve
CVE-2016-10328
2017-04-14 04:59:00
mageia
mageia
Updated freetype2 packages fix security vulnerability
2017-05-02 09:37:59
gentoo
gentoo
FreeType: Multiple vulnerabilities
2017-06-06 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00