Search for vulnerabilities
Vulnerability details: VCID-zbxb-j4tw-aucd
Vulnerability ID VCID-zbxb-j4tw-aucd
Aliases CVE-2012-1136
Summary Mateusz Jurczyk of the Google Security Team used the Address Sanitizer tool to discover a series of memory safety bugs in the FreeType library, some of which could cause memory corruption and exploitable crashes with certain fonts and font parsing. Firefox Mobile has been upgraded to FreeType version 2.4.9 which addresses these issues. Desktop Firefox does not use Freetype for fonts and was not affected. On Linux systems, Firefox will use the installed system library for FreeType. Linux users should make sure they are current on system security updates.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-122 Heap-based Buffer Overflow
System Score Found at
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
epss 0.04956 https://api.first.org/data/v1/epss?cve=CVE-2012-1136
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2012-21
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1136.json
https://api.first.org/data/v1/epss?cve=CVE-2012-1136
662864 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=662864
800594 https://bugzilla.redhat.com/show_bug.cgi?id=800594
CVE-2012-1136 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1136
mfsa2012-21 https://www.mozilla.org/en-US/security/advisories/mfsa2012-21
RHSA-2012:0467 https://access.redhat.com/errata/RHSA-2012:0467
USN-1403-1 https://usn.ubuntu.com/1403-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.89244
EPSS Score 0.04956
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:29.276591+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2012/mfsa2012-21.md 37.0.0