CVE-2014-9656 (retired)

Priority
Description
The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before
2.5.4 does not properly check for an integer overflow, which allows remote
attackers to cause a denial of service (out-of-bounds read) or possibly
have unspecified other impact via a crafted OpenType font.
Notes
 mdeslaur> in precise, this code is in src/sfnt/ttsbit0.c
Assigned-to
mdeslaur
More Information

Updated: 2019-09-19 15:51:31 UTC (commit d32ebc32606b9517c6fa7d65a15441e2a57a6de5)