CVE-2014-9657 (retired)

Priority
Description
The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before
2.5.4 does not establish a minimum record size, which allows remote
attackers to cause a denial of service (out-of-bounds read) or possibly
have unspecified other impact via a crafted TrueType font.
Assigned-to
mdeslaur
More Information

Updated: 2019-08-23 09:04:55 UTC (commit 436fd4ed4cf0038ddd382cb8649607ace163dda7)