Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-jqjv-gjbe-dbfg |
| Summary | Mateusz Jurczyk of the Google Security Team used the Address
Sanitizer tool to discover a series of memory safety bugs in the FreeType
library, some of which could cause memory corruption and exploitable crashes
with certain fonts and font parsing. Firefox Mobile has been upgraded to
FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not
use Freetype for fonts and was not affected.
On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
| 0 |
| url |
pkg:deb/debian/freetype@1.0.0.1998-03-22-1 |
| purl |
pkg:deb/debian/freetype@1.0.0.1998-03-22-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.0.0.1998-03-22-1 |
|
| 1 |
| url |
pkg:deb/debian/freetype@1.2-3 |
| purl |
pkg:deb/debian/freetype@1.2-3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.2-3 |
|
| 2 |
| url |
pkg:deb/debian/freetype@1.3.1-1 |
| purl |
pkg:deb/debian/freetype@1.3.1-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@1.3.1-1 |
|
| 3 |
| url |
pkg:deb/debian/freetype@2.0.9-1 |
| purl |
pkg:deb/debian/freetype@2.0.9-1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.0.9-1 |
|
| 4 |
| url |
pkg:deb/debian/freetype@2.1.7-8 |
| purl |
pkg:deb/debian/freetype@2.1.7-8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.1.7-8 |
|
| 5 |
| url |
pkg:deb/debian/freetype@2.2.1-5 |
| purl |
pkg:deb/debian/freetype@2.2.1-5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.2.1-5 |
|
| 6 |
| url |
pkg:deb/debian/freetype@2.2.1-5%2Betch4 |
| purl |
pkg:deb/debian/freetype@2.2.1-5%2Betch4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.2.1-5%252Betch4 |
|
| 7 |
| url |
pkg:deb/debian/freetype@2.3.7-2%2Blenny8 |
| purl |
pkg:deb/debian/freetype@2.3.7-2%2Blenny8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.3.7-2%252Blenny8 |
|
| 8 |
| url |
pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze4 |
| purl |
pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.4.2-2.1%252Bsqueeze4 |
|
| 9 |
| url |
pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze6 |
| purl |
pkg:deb/debian/freetype@2.4.2-2.1%2Bsqueeze6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-2yvb-7w2n-ybhg |
|
| 1 |
| vulnerability |
VCID-31q8-w6bh-zuey |
|
| 2 |
| vulnerability |
VCID-6bcv-2cx6-77es |
|
| 3 |
| vulnerability |
VCID-6jeb-n9un-3qhd |
|
| 4 |
| vulnerability |
VCID-79xr-2yux-37ea |
|
| 5 |
| vulnerability |
VCID-8sk7-1vxp-9bgd |
|
| 6 |
| vulnerability |
VCID-8zjm-pmh1-p7a2 |
|
| 7 |
| vulnerability |
VCID-aswe-3g48-wfgm |
|
| 8 |
| vulnerability |
VCID-e4yc-a8j8-mqfq |
|
| 9 |
| vulnerability |
VCID-fe3g-ww6q-hqa8 |
|
| 10 |
| vulnerability |
VCID-g8bk-9bsd-p7bk |
|
| 11 |
| vulnerability |
VCID-jqjv-gjbe-dbfg |
|
| 12 |
| vulnerability |
VCID-kemx-zuam-uqab |
|
| 13 |
| vulnerability |
VCID-keyh-yygz-y7ep |
|
| 14 |
| vulnerability |
VCID-kwd7-sv6y-eyh8 |
|
| 15 |
| vulnerability |
VCID-psxs-t1t2-bkba |
|
| 16 |
| vulnerability |
VCID-r47y-we15-pqg3 |
|
| 17 |
| vulnerability |
VCID-tvvd-q7nw-eyey |
|
| 18 |
| vulnerability |
VCID-vx31-mywv-1fhr |
|
| 19 |
| vulnerability |
VCID-xxs6-891m-t3bm |
|
| 20 |
| vulnerability |
VCID-z2q3-ejur-8uhb |
|
| 21 |
| vulnerability |
VCID-z66j-hvpb-9ydk |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/freetype@2.4.2-2.1%252Bsqueeze6 |
|
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-jqjv-gjbe-dbfg |