PT-2019-7342

CVE-2015-9383

Published

2016-01-13

Updated

2023-02-23

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.2

Description The issue is related to a heap-based buffer over-read in the tt cmap14 validate function located in sfnt/ttcmap.c.

Recommendations For versions prior to 2.6.2, update to version 2.6.2 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

ALT-PU-2016-1019

DLA-1909-1

USN-4126-1

USN-4126-2

Found an issue in the description? Have something to add? Feel free to write us 👾