CVE-2010-2520

Priority
Description
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c
in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows
remote attackers to cause a denial of service (application crash) or
possibly execute arbitrary code via a crafted font file.
More Information

Updated: 2019-03-19 11:54:04 UTC (commit 15472795df7e9de45b82f2d36b8b419b939f97b2)