PT-2019-7340

CVE-2015-9381

Published

2016-01-13

Updated

2019-12-24

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1

Description The issue is related to a heap-based buffer over-read in the T1 Get Private Dict function located in type1/t1parse.c.

Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

ALT-PU-2016-1019

CESA-2018_3140

CESA-2019_4254

DLA-1909-1

RHSA-2018:3140

RHSA-2018_3140

RHSA-2019:4254

RHSA-2019_4254

USN-4126-2

Found an issue in the description? Have something to add? Feel free to write us 👾