What is CVE-2012-4190?

CVE-2012-4190 is a vulnerability in Cyanogenmod, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-10-12.

Is CVE-2012-4190 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Cyanogenmod

CVE-2012-4190

The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

Cyanogenmod — versions 10
Mozilla Firefox — versions 0.1, 0.2, 0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

BushraAloraini/Android-Vulnerabilities

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2012-4190?: CVE-2012-4190 is a vulnerability in Cyanogenmod, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2012-10-12.
Is CVE-2012-4190 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.