Search for packages
| purl | pkg:ebuild/media-libs/freetype@2.3.4-r2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-j8rx-2gzp-aaaq | Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow. |
CVE-2007-2754
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T12:46:12.339190+00:00 | Gentoo Importer | Fixing | VCID-j8rx-2gzp-aaaq | https://security.gentoo.org/glsa/200705-22 | 36.0.0 |
| 2024-09-18T07:40:57.018865+00:00 | Gentoo Importer | Fixing | VCID-j8rx-2gzp-aaaq | https://security.gentoo.org/glsa/200705-22 | 34.0.1 |
| 2024-01-04T01:46:48.865340+00:00 | Gentoo Importer | Fixing | VCID-j8rx-2gzp-aaaq | https://security.gentoo.org/glsa/200705-22 | 34.0.0rc1 |