« List of all CVEs

CVE-2010-3855

Published: 11/26/2010 Last updated: 8/7/2024 Reserved: 10/8/2010

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (2)

conf-freetype conf-gd

Products affected (1)

Product Vendor Version
n/a n/a 5.5

References (60)