Related Vulnerabilities: CVE-2020-15999  

A head buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyps can cause a heap buffer overflow in Load_SBit_Png.

Severity High

Remote Yes

Type Arbitrary code execution

Description

A head buffer overflow has been found in freetype2 before 2.10.4. Malformed TTF files with PNG sbit glyps can cause a heap buffer overflow in Load_SBit_Png.

AVG-1254 freetype2 2.10.3-1 2.10.4-1 High Fixed

http://git.savannah.nongnu.org/cgit/freetype/freetype2.git/commit/?id=a3bab162b2ae616074c8877a04556932998aeacd
https://savannah.nongnu.org/bugs/?59308