CVE-2014-9664 (retired)

Priority
Description
FreeType before 2.5.4 does not check for the end of the data during certain
parsing actions, which allows remote attackers to cause a denial of service
(out-of-bounds read) or possibly have unspecified other impact via a
crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.
Assigned-to
mdeslaur
More Information

Updated: 2019-08-23 09:04:56 UTC (commit 436fd4ed4cf0038ddd382cb8649607ace163dda7)