Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

freetype freetype vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2014-2240

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType prior to 2.5.3 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.0Freetype Freetype 2.0.1Freetype Freetype 2.0.2Freetype Freetype 2.0.3Freetype Freetype 2.0.4Freetype Freetype 2.0.5Freetype Freetype 2.0.6Freetype Freetype 2.0.7Freetype Freetype 2.0.8Freetype Freetype 2.0.9
9.3
CVSSv2

CVE-2010-3311

Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType prior to 2.4 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a ...
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.6Freetype Freetype 2.0.9Freetype Freetype 2.1Freetype Freetype 2.1.3Freetype Freetype 2.1.4Freetype Freetype 2.1.5Freetype Freetype 2.1.6Freetype Freetype 2.1.7Freetype Freetype 2.1.8Freetype Freetype 2.1.9
4.3
CVSSv2

CVE-2012-5668

FreeType prior to 2.4.11 allows context-dependent malicious users to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.0Freetype Freetype 2.0.1Freetype Freetype 2.0.2Freetype Freetype 2.0.3Freetype Freetype 2.0.4Freetype Freetype 2.0.5Freetype Freetype 2.0.6Freetype Freetype 2.0.7Freetype Freetype 2.0.8Freetype Freetype 2.0.9
4.3
CVSSv2

CVE-2012-5669

The _bdf_parse_glyphs function in FreeType prior to 2.4.11 allows context-dependent malicious users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.0Freetype Freetype 2.0.1Freetype Freetype 2.0.2Freetype Freetype 2.0.3Freetype Freetype 2.0.4Freetype Freetype 2.0.5Freetype Freetype 2.0.6Freetype Freetype 2.0.7Freetype Freetype 2.0.8Freetype Freetype 2.0.9
4.3
CVSSv2

CVE-2012-5670

The _bdf_parse_glyphs function in FreeType prior to 2.4.11 allows context-dependent malicious users to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.0Freetype Freetype 2.0.1Freetype Freetype 2.0.2Freetype Freetype 2.0.3Freetype Freetype 2.0.4Freetype Freetype 2.0.5Freetype Freetype 2.0.6Freetype Freetype 2.0.7Freetype Freetype 2.0.8Freetype Freetype 2.0.9
4.3
CVSSv2

CVE-2010-3053

bdf/bdflib.c in FreeType prior to 2.4.2 allows remote malicious users to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.6Freetype Freetype 2.0.9Freetype Freetype 2.1Freetype Freetype 2.1.3Freetype Freetype 2.1.4Freetype Freetype 2.1.5Freetype Freetype 2.1.6Freetype Freetype 2.1.7Freetype Freetype 2.1.8Freetype Freetype 2.1.9
6.8
CVSSv2

CVE-2010-3814

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and previous versions allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, a...
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.6Freetype Freetype 2.0.9Freetype Freetype 2.1Freetype Freetype 2.1.3Freetype Freetype 2.1.4Freetype Freetype 2.1.5Freetype Freetype 2.1.6Freetype Freetype 2.1.7Freetype Freetype 2.1.8Freetype Freetype 2.1.9
6.8
CVSSv2

CVE-2010-3855

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and previous versions allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.
Freetype FreetypeFreetype Freetype 1.3.1Freetype Freetype 2.0.6Freetype Freetype 2.0.9Freetype Freetype 2.1Freetype Freetype 2.1.3Freetype Freetype 2.1.4Freetype Freetype 2.1.5Freetype Freetype 2.1.6Freetype Freetype 2.1.7Freetype Freetype 2.1.8Freetype Freetype 2.1.9
7.5
CVSSv2

CVE-2008-1808

Multiple off-by-one errors in FreeType2 prior to 2.3.6 allow context-dependent malicious users to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer ...
Freetype Freetype 1.3.1Freetype Freetype 2.0.6Freetype Freetype 2.0.9Freetype Freetype 2.1.7Freetype Freetype 2.1.9Freetype Freetype 2.1.10Freetype Freetype 2.2.0Freetype Freetype 2.2.1Freetype Freetype 2.2.10Freetype Freetype 2.3.3Freetype Freetype 2.3.4Freetype Freetype 2.3.5
7.5
CVSSv2

CVE-2006-1861

Multiple integer overflows in FreeType prior to 2.2 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a cr...
Freetype Freetype 2.0.9Freetype Freetype 2.1.3Freetype Freetype 2.1.4Freetype Freetype 2.1.5Freetype Freetype 2.1.6Freetype Freetype 2.1.7Freetype Freetype 2.1.8Freetype Freetype 2.1.9Freetype Freetype 2.1.10
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
viasatdoscross-site request forgeryteconcethemeCVE-2025-1565CVE-2025-28076firmwarez2dweb serverCVE-2025-2070CVE-2025-3645CVE-2025-31324CVE-2024-6235
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook