Description
The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-185-1 | freetype security update |
Debian DSA |
DSA-3188-1 | freetype security update |
EUVD |
EUVD-2014-9468 | The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font. |
Ubuntu USN |
USN-2510-1 | FreeType vulnerabilities |
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Subscriptions
Canonical
Subscribe
Ubuntu Linux
Subscribe
Debian
Subscribe
Debian Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Freetype
Subscribe
Freetype
Subscribe
Opensuse
Subscribe
Opensuse
Subscribe
Oracle
Subscribe
Solaris
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Hpc Node
Subscribe
Enterprise Linux Hpc Node Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Eus
Subscribe
Enterprise Linux Workstation
Subscribe
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T13:55:03.780Z
Reserved: 2015-02-07T00:00:00.000Z
Link: CVE-2014-9658
No data.
Status : Deferred
Published: 2015-02-08T11:59:20.647
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-9658
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN