FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font.
Product | Vendor | Version |
---|---|---|
n/a | n/a | < be826b4451fd187a7c0b04be4f8243d5df6e0450 |