Search for packages
purl | pkg:deb/debian/freetype@2.2.1-5%2Betch4 |
Next non-vulnerable version | 2.12.1+dfsg-5+deb12u4 |
Latest non-vulnerable version | 2.12.1+dfsg-5+deb12u4 |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-13a9-rqnw-ukf1
Aliases: CVE-2020-15999 GHSA-pv36-h7jh-qm62 |
In Freetype, if PNG images were embedded into fonts, the Load_SBit_Png function contained an integer overflow that led to a heap buffer overflow, memory corruption, and an exploitable crash.*Note: While Project Zero did discover instances of this vulnerability being exploited in the wild against Chrome, in Firefox this vulnerability is only triggerable if a rarely-used, hidden preference is toggled, and only affected Linux and Android operating systems. Other operating systems are unaffected; and Linux and Android are unaffected in the default configuration.* |
Affected by 5 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-1bv8-ra2a-e3hz
Aliases: CVE-2012-1143 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-1exf-drx5-h3du
Aliases: CVE-2014-9672 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-1qxz-7hhb-vyhw
Aliases: CVE-2012-5668 |
Affected by 38 other vulnerabilities. |
|
VCID-2s6d-v64u-b7ht
Aliases: CVE-2015-9381 |
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. |
Affected by 6 other vulnerabilities. |
VCID-2uwb-11uf-jbfs
Aliases: CVE-2012-1129 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-2wm3-1yvf-93gh
Aliases: CVE-2014-9669 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-41wk-t7qa-8ka8
Aliases: CVE-2014-9667 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-4kq7-ncja-w3c1
Aliases: CVE-2012-1144 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-5jwk-a9p5-wucg
Aliases: CVE-2015-9382 |
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. |
Affected by 6 other vulnerabilities. |
VCID-5pbn-p8wu-n3bt
Aliases: CVE-2022-27404 |
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. |
Affected by 2 other vulnerabilities. |
VCID-61ee-ck9d-nug1
Aliases: CVE-2022-27406 |
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. |
Affected by 2 other vulnerabilities. |
VCID-6fyw-dnj2-cfeh
Aliases: CVE-2010-2808 |
Affected by 63 other vulnerabilities. |
|
VCID-6kqn-b3jz-7yce
Aliases: CVE-2010-3311 |
Affected by 63 other vulnerabilities. |
|
VCID-6wdq-yru9-1qg2
Aliases: CVE-2011-0226 |
Affected by 38 other vulnerabilities. |
|
VCID-71yp-cjqr-cuds
Aliases: CVE-2014-9656 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-79sq-ck6s-1qc8
Aliases: CVE-2012-1133 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-7juk-sxf8-d3d5
Aliases: CVE-2010-2500 |
Affected by 63 other vulnerabilities. |
|
VCID-7t12-cstg-7fgg
Aliases: CVE-2012-1139 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-7zvg-h1e7-qff3
Aliases: CVE-2010-2497 |
freetype: integer underflow vulnerability |
Affected by 63 other vulnerabilities. |
VCID-82b5-1fp8-bqb7
Aliases: CVE-2012-1131 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-89cr-ps6t-hycu
Aliases: CVE-2012-5669 |
Affected by 38 other vulnerabilities. |
|
VCID-8kpp-cfj8-cbh5
Aliases: CVE-2014-9662 |
Affected by 16 other vulnerabilities. |
|
VCID-92md-pkwm-yyb4
Aliases: CVE-2008-1807 |
Affected by 82 other vulnerabilities. |
|
VCID-9adn-sytv-2qau
Aliases: CVE-2014-9675 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-9nwu-3fdu-m7c1
Aliases: CVE-2014-9666 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-9x7p-53cz-3yby
Aliases: CVE-2014-9660 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-9zpg-a389-8fc3
Aliases: CVE-2014-2240 |
Affected by 16 other vulnerabilities. |
|
VCID-a595-94ux-mkd6
Aliases: CVE-2012-1137 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-abqn-f785-3ydv
Aliases: CVE-2022-27405 |
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. |
Affected by 2 other vulnerabilities. |
VCID-ad18-t4ua-gbdh
Aliases: CVE-2010-1797 |
Affected by 63 other vulnerabilities. |
|
VCID-adys-usze-bqaf
Aliases: CVE-2014-9746 |
security update |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
VCID-auqa-26un-zkat
Aliases: CVE-2017-8287 |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-b9xa-app7-dffn
Aliases: CVE-2011-3439 |
Affected by 38 other vulnerabilities. |
|
VCID-bddp-z7q7-rbh8
Aliases: CVE-2012-1127 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-btb4-cmy2-6ffe
Aliases: CVE-2012-1132 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-cqks-9fvy-tyf7
Aliases: CVE-2010-2807 |
Affected by 63 other vulnerabilities. |
|
VCID-czyw-19hc-7yd8
Aliases: CVE-2012-5670 |
Affected by 38 other vulnerabilities. |
|
VCID-d1en-7h6j-m3cj
Aliases: CVE-2014-9664 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-d6jc-ams3-yqg2
Aliases: CVE-2007-3506 |
CVE-2007-3506 Emboldden rendering with a sbit font makes glibc detected. |
Affected by 82 other vulnerabilities. |
VCID-djn1-vene-xkg5
Aliases: CVE-2007-1351 |
Affected by 82 other vulnerabilities. |
|
VCID-dkhv-nw4r-wqc5
Aliases: CVE-2014-9673 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-dnbx-qrv8-p7fj
Aliases: CVE-2010-3053 |
freetype: NULL pointer deref in bdf/bdflib.c |
Affected by 63 other vulnerabilities. |
VCID-drjw-h1s9-8bcn
Aliases: CVE-2014-2241 |
Affected by 16 other vulnerabilities. |
|
VCID-dumu-29j2-43hf
Aliases: CVE-2012-1140 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-f7q4-f6yg-p3cx
Aliases: CVE-2010-2805 |
Affected by 63 other vulnerabilities. |
|
VCID-fgp4-g3js-z3ej
Aliases: CVE-2017-8105 |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-fngc-tfhn-8fbp
Aliases: CVE-2007-2754 |
Affected by 82 other vulnerabilities. |
|
VCID-fvm5-667f-ebaf
Aliases: CVE-2014-9674 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-g9kx-xdac-w3as
Aliases: CVE-2010-2519 |
Affected by 63 other vulnerabilities. |
|
VCID-ggtx-ejjc-27gu
Aliases: CVE-2010-3855 |
Affected by 63 other vulnerabilities. |
|
VCID-gvtz-hzgv-xubg
Aliases: CVE-2014-9661 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-gz2g-4nha-c3ey
Aliases: CVE-2009-0946 |
Affected by 63 other vulnerabilities. |
|
VCID-hqgu-a9m2-rkdn
Aliases: CVE-2012-1142 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-jc84-ppvg-jqe1
Aliases: CVE-2008-1808 |
Affected by 82 other vulnerabilities. |
|
VCID-jmyx-xhwn-rkhn
Aliases: CVE-2010-2499 |
Affected by 63 other vulnerabilities. |
|
VCID-k3fd-zdmc-sqcr
Aliases: CVE-2015-9290 |
In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again. |
Affected by 6 other vulnerabilities. |
VCID-ka8y-gjxr-mug1
Aliases: CVE-2010-2498 |
Affected by 63 other vulnerabilities. |
|
VCID-krxb-vgnu-gffu
Aliases: CVE-2008-1806 |
Affected by 82 other vulnerabilities. |
|
VCID-kt2w-xvg1-nkbv
Aliases: CVE-2016-10244 |
Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-m5rn-fntz-tfhw
Aliases: CVE-2012-1141 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-m7w5-ykrk-sfar
Aliases: CVE-2014-9663 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-mvxt-7z1m-fbe4
Aliases: CVE-2014-9659 |
Affected by 16 other vulnerabilities. |
|
VCID-njhj-r878-mybu
Aliases: CVE-2014-9670 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-pab4-8jv9-6yb3
Aliases: CVE-2012-1130 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-pvgc-k1fr-mkg8
Aliases: CVE-2014-9657 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-q64b-ezp8-jqb5
Aliases: CVE-2012-1135 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-qrst-n13c-b7ez
Aliases: CVE-2012-1134 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-qxjd-jpvb-ubeg
Aliases: CVE-2014-9747 |
security update |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
VCID-r23j-thhz-1fgg
Aliases: CVE-2010-2541 |
Affected by 63 other vulnerabilities. |
|
VCID-r53k-qnkp-wbbf
Aliases: CVE-2010-2520 |
Affected by 63 other vulnerabilities. |
|
VCID-r6d4-xhky-yuhd
Aliases: CVE-2010-2806 |
Affected by 63 other vulnerabilities. |
|
VCID-rjxf-hseb-nqgq
Aliases: CVE-2014-9668 |
Affected by 16 other vulnerabilities. |
|
VCID-svnx-6c3x-sfe3
Aliases: CVE-2014-9671 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-t98s-1yz1-8ka9
Aliases: CVE-2014-9745 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. Affected by 6 other vulnerabilities. |
|
VCID-uj1s-58a2-uuf8
Aliases: CVE-2011-3256 |
Affected by 38 other vulnerabilities. |
|
VCID-uweh-5m2b-1fgz
Aliases: CVE-2012-1128 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-v59n-1364-k3eu
Aliases: CVE-2012-1126 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-vpw9-fwhj-5ka1
Aliases: CVE-2010-3054 |
freetype: DoS via nested "seac" calls |
Affected by 63 other vulnerabilities. |
VCID-w4yd-5rsk-h3f8
Aliases: CVE-2014-9658 |
Affected by 38 other vulnerabilities. Affected by 16 other vulnerabilities. |
|
VCID-wcrw-9se1-8ufr
Aliases: CVE-2015-9383 |
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. |
Affected by 6 other vulnerabilities. |
VCID-wdzu-k15d-gfha
Aliases: CVE-2010-2527 |
Affected by 63 other vulnerabilities. |
|
VCID-xjnu-a1z2-17bg
Aliases: CVE-2010-3814 |
Affected by 63 other vulnerabilities. |
|
VCID-xp11-9392-cuf1
Aliases: CVE-2012-1138 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
VCID-xxdy-qcnu-23cn
Aliases: CVE-2018-6942 |
An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file. |
Affected by 5 other vulnerabilities. |
VCID-yjkt-2a6r-wybe
Aliases: CVE-2014-9665 |
Affected by 16 other vulnerabilities. |
|
VCID-yt26-14rb-hfet
Aliases: CVE-2025-27363 |
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild. |
Affected by 0 other vulnerabilities. |
VCID-zbxb-j4tw-aucd
Aliases: CVE-2012-1136 |
Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates. |
Affected by 38 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |