Published: 14/04/2017 Updated: 26/01/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

FreeType 2 prior to 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype

Debian Bug report logs - #861308 freetype: CVE-2017-8287: out-of-bounds write via t1_builder_close_contour function Package: src:freetype; Maintainer for src:freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 27 Apr 2017 09:21:01 UTC Severity: grave ...

Debian Bug report logs - #861220 freetype: CVE-2017-8105 Package: src:freetype; Maintainer for src:freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 26 Apr 2017 06:24:01 UTC Severity: grave Tags: patch, security, upstream Found in versions freetyp ...

FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjsc ...

CWE-787 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8 http://www.securityfocus.com/bid/97673 https://security.gentoo.org/glsa/201706-14 https://www.oracle.com/security-alerts/cpuapr2020.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861308

CVE-2017-7864

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect