Buffer overflow in Freetype

CVE-2010-3855

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

Vulnerability class: Buffer Overflow

EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.

Affected products

  • Freetype — versions 2.3.11, 2.3.2, 1.3.1
  • N/a — versions n/a

Weakness classification (CWE)

References