CVE-2014-9659 (retired)

Priority
Description
cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4
proceeds with additional hints after the hint mask has been computed, which
allows remote attackers to execute arbitrary code or cause a denial of
service (stack-based buffer overflow) via a crafted OpenType font. NOTE:
this vulnerability exists because of an incomplete fix for CVE-2014-2240.
Assigned-to
mdeslaur
More Information

Updated: 2019-08-23 09:04:56 UTC (commit 436fd4ed4cf0038ddd382cb8649607ace163dda7)