Search for packages
| purl | pkg:deb/debian/freetype@2.5.2-3 |
| Next non-vulnerable version | 2.12.1+dfsg-5+deb12u4 |
| Latest non-vulnerable version | 2.12.1+dfsg-5+deb12u4 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6xf8-49hw-hfaf
Aliases: CVE-2016-10244 |
Multiple vulnerabilities have been found in FreeType, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-a9r6-k8gp-nbfs
Aliases: CVE-2015-9383 |
freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS |
Affected by 6 other vulnerabilities. |
|
VCID-b35u-t7u2-sudy
Aliases: CVE-2014-9746 |
security update |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-dcxj-zzfj-3bg7
Aliases: CVE-2022-27406 |
Multiple vulnerabilities have been discovered in FreeType, the worst of which can lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-hutw-rk7x-5bc3
Aliases: CVE-2014-9745 |
security update |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-m8ha-zxb7-tyg6
Aliases: CVE-2017-8105 |
Multiple vulnerabilities have been found in FreeType, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-nn4w-gq71-kfgd
Aliases: CVE-2015-9290 |
freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c |
Affected by 6 other vulnerabilities. |
|
VCID-nx21-ks3v-53e4
Aliases: CVE-2020-15999 GHSA-pv36-h7jh-qm62 |
Heap buffer overflow in CefSharp ### Impact A memory corruption bug(Heap overflow) in the FreeType font rendering library. > This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images . As per https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild. ### Patches Upgrade to 85.3.130 or higher ### References - https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ - https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 - https://magpcss.org/ceforum/viewtopic.php?f=10&t=17942 To review the `CEF/Chromium` patch see https://bitbucket.org/chromiumembedded/cef/commits/cd6cbe008b127990036945fb75e7c2c1594ab10d |
Affected by 5 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-s148-7tzs-gfg8
Aliases: CVE-2022-27405 |
Multiple vulnerabilities have been discovered in FreeType, the worst of which can lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-tsw4-kqbc-kqf1
Aliases: CVE-2015-9381 |
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash |
Affected by 6 other vulnerabilities. |
|
VCID-uy24-k7je-pyhr
Aliases: CVE-2025-27363 |
A vulnerability has been discovered in FreeType, which can lead to remote code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-wr9p-x4sm-aqdh
Aliases: CVE-2017-8287 |
Multiple vulnerabilities have been found in FreeType, the worst of which allows remote attackers to execute arbitrary code. |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-xb9q-dk8j-fbch
Aliases: CVE-2022-27404 |
Multiple vulnerabilities have been discovered in FreeType, the worst of which can lead to remote code execution. |
Affected by 2 other vulnerabilities. |
|
VCID-y4qf-qfbv-mqdg
Aliases: CVE-2018-6942 |
freetype: NULL pointer dereference in the Ins_GETVARIATION() function |
Affected by 5 other vulnerabilities. |
|
VCID-ysfs-xxjz-vbep
Aliases: CVE-2015-9382 |
freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read |
Affected by 6 other vulnerabilities. |
|
VCID-zpnw-kwqf-63bp
Aliases: CVE-2014-9747 |
security update |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-17au-pc1k-m7at | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9662
|
| VCID-1ws8-ww77-ybah | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9674
|
| VCID-3jn7-t1f6-uyfr | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9657
|
| VCID-468g-dxsr-8yer | A vulnerability in FreeType could result in execution of arbitrary code or Denial of Service. |
CVE-2014-2240
|
| VCID-73d5-ezt5-87eh | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9663
|
| VCID-73e1-scax-8ugj | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9675
|
| VCID-ask2-xeb7-7qbk | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9671
|
| VCID-fp2p-5ymf-wffj | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9669
|
| VCID-gtka-sbgw-tuf5 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9665
|
| VCID-jg4p-nv1j-fyb9 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9670
|
| VCID-jn9w-2axj-8ke5 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9659
|
| VCID-nakp-vmxa-akey | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9664
|
| VCID-nfp7-sjcv-wkfv | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9668
|
| VCID-p2yw-ksc4-jfe9 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9660
|
| VCID-p8h9-9xku-hbhv | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9666
|
| VCID-pznp-81q7-z3d4 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9658
|
| VCID-th47-m45d-m7dk | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9667
|
| VCID-tmb5-g2ua-ekek | freetype: OOB stack-based read/write in cf2_hintmap_build() |
CVE-2014-2241
|
| VCID-tu7r-tsp8-73ew | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9673
|
| VCID-u15r-u7zz-17ad | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9672
|
| VCID-uh3u-pzzg-fkgg | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9661
|
| VCID-uhnk-v91u-p7e5 | Multiple vulnerabilities have been found in FreeType, possibly resulting in Denial of Service. |
CVE-2014-9656
|