Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9d7b-xu7h-wffk
Vulnerability ID VCID-9d7b-xu7h-wffk
Aliases CVE-2007-1351
Summary Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Status Published
Exploitability 0.5
Weighted Severity 0.1
Risk 0.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.07768 https://api.first.org/data/v1/epss?cve=CVE-2007-1351
epss 0.07768 https://api.first.org/data/v1/epss?cve=CVE-2007-1351
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1351.json
https://api.first.org/data/v1/epss?cve=CVE-2007-1351
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1351
235265 https://bugzilla.redhat.com/show_bug.cgi?id=235265
426771 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=426771
GLSA-200705-02 https://security.gentoo.org/glsa/200705-02
GLSA-200705-10 https://security.gentoo.org/glsa/200705-10
RHSA-2007:0125 https://access.redhat.com/errata/RHSA-2007:0125
RHSA-2007:0126 https://access.redhat.com/errata/RHSA-2007:0126
RHSA-2007:0132 https://access.redhat.com/errata/RHSA-2007:0132
RHSA-2007:0150 https://access.redhat.com/errata/RHSA-2007:0150
USN-448-1 https://usn.ubuntu.com/448-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.92099
EPSS Score 0.07768
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:37:31.549030+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0