Published: 14/04/2017 Updated: 26/01/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

FreeType 2 prior to 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype

Debian Bug report logs - #861308 freetype: CVE-2017-8287: out-of-bounds write via t1_builder_close_contour function Package: src:freetype; Maintainer for src:freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 27 Apr 2017 09:21:01 UTC Severity: grave ...

Debian Bug report logs - #861220 freetype: CVE-2017-8105 Package: src:freetype; Maintainer for src:freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 26 Apr 2017 06:24:01 UTC Severity: grave Tags: patch, security, upstream Found in versions freetyp ...

CWE-787 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b http://www.securityfocus.com/bid/97680 https://security.gentoo.org/glsa/201706-14 https://www.oracle.com/security-alerts/cpuapr2020.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861308

CVE-2017-7857

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect