Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-c9zr-gqub-mydn
Vulnerability ID VCID-c9zr-gqub-mydn
Aliases CVE-2010-2527
Summary Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02329 https://api.first.org/data/v1/epss?cve=CVE-2010-2527
epss 0.02329 https://api.first.org/data/v1/epss?cve=CVE-2010-2527
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-2527.json
https://api.first.org/data/v1/epss?cve=CVE-2010-2527
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2527
614557 https://bugzilla.redhat.com/show_bug.cgi?id=614557
GLSA-201201-09 https://security.gentoo.org/glsa/201201-09
RHSA-2010:0577 https://access.redhat.com/errata/RHSA-2010:0577
RHSA-2010:0578 https://access.redhat.com/errata/RHSA-2010:0578
USN-963-1 https://usn.ubuntu.com/963-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85122
EPSS Score 0.02329
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:37:31.934503+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0