CVE-2006-0747
NoneCVSS
—
EPSS
12.7%
Published
May 23, 2006
CISA due date
—
The record
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | freetype | 0 | 2.2.1-1 |
| Debian:11 | freetype | 0 | 2.2.1-1 |
| Debian:12 | freetype | 0 | 2.2.1-1 |
| Debian:13 | freetype | 0 | 2.2.1-1 |
| Debian:3.0 | freetype | 0 | 2.0.9-1woody1 |
| Debian:3.1 | freetype | 0 | 2.1.7-2.5 |
| Red Hat:enterprise_linux:3::as | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:4::as | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
Related vulnerabilities
- CVE-2020-15999 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote… Also affects freetype
- CVE-2006-2661 ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service… Also affects freetype
- CVE-2025-27363 An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of… Also affects freetype
- CVE-2010-1797 Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in… Also affects freetype
- CVE-2026-10722 A vulnerability has been found in cilium ebpf up to 0.21.0. CWE-189
- CVE-2026-10268 A weakness has been identified in janet-lang janet up to 1.41.0. CWE-189
- CVE-2026-8276 A flaw has been found in bettercap up to 2.41.5. CWE-189
- CVE-2026-8275 A vulnerability was detected in bettercap up to 2.41.5. CWE-189