CVE-2014-9660

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4

Description The issue is related to the bdf parse glyphs function in bdf/bdflib.c, which does not properly handle a missing ENDCHAR record. This can be exploited by remote attackers using a crafted BDF font, potentially leading to a denial of service due to a NULL pointer dereference or possibly having other unspecified impacts.

Recommendations For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted BDF fonts to minimize the risk of exploitation.