Jagger

The issue is related to an integer underflow in glyph handling, which can be exploited by remote attackers using a crafted font file. This can lead to a denial of service, causing the application to crash, or possibly allow the execution of arbitrary code. The vulnerability can be exploited remotely and may compromise the confidentiality, integrity, and availability of protected information.

The issue concerns multiple vulnerabilities in the freetype package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. A heap-based buffer overflow in the `Ins IUP` function in `truetype/ttinterp.c` can occur when TrueType bytecode support is enabled, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font file.

The issue is related to multiple vulnerabilities in the FreeType package, which can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, FreeType before version 2.4.2 uses incorrect integer data types during bounds checking. This can allow remote attackers to cause a denial of service, such as an application crash, or possibly execute arbitrary code via a crafted font file.

The issue affects the freetype package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur remotely. A buffer overflow in the `Mac Read POST Resource` function in `base/ftobjs.c` allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File.

The issue is related to a heap-based buffer overflow in the Mac Read POST Resource function in base/ftobjs.c, which can be triggered by a crafted length value in a POST fragment header in a font file. This can cause a denial of service, such as an application crash, or possibly allow the execution of arbitrary code. The vulnerability can be exploited remotely.

The issue concerns multiple vulnerabilities in the freetype package, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. Specifically, the `psh glyph find strong points` function in `pshinter/pshalgo.c` does not properly implement hinting masks, allowing remote attackers to cause a denial of service, such as heap memory corruption and application crash, or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.

The issue concerns multiple vulnerabilities in the FreeType package, which can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. A buffer overflow in the `Mac Read POST Resource` function in `base/ftobjs.c` allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.

The issue is related to an integer overflow in the gray render span function in smooth/ftgrays.c, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font file. Multiple vulnerabilities in the freetype package may lead to violations of confidentiality, integrity, and availability of protected information, and exploitation can be done remotely.