CVE-2006-2661
NoneCVSS
—
EPSS
16.5%
Published
May 30, 2006
CISA due date
—
The record
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | freetype | 0 | 2.2.1-1 |
| Debian:11 | freetype | 0 | 2.2.1-1 |
| Debian:12 | freetype | 0 | 2.2.1-1 |
| Debian:13 | freetype | 0 | 2.2.1-1 |
| Debian:3.0 | freetype | 0 | 2.0.9-1woody1 |
| Debian:3.1 | freetype | 0 | 2.1.7-2.5 |
| Red Hat:enterprise_linux:3::as | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:4::as | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
Related vulnerabilities
- CVE-2020-15999 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote… Also affects freetype
- CVE-2006-0747 Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of… Also affects freetype
- CVE-2025-27363 An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of… Also affects freetype
- CVE-2010-1797 Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in… Also affects freetype
- CVE-2026-76781 A flaw was found in libxml2. CWE-476
- CVE-2026-77692 An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a… CWE-476
- CVE-2026-53719 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-476
- CVE-2026-54084 Wazuh is an open-source security platform providing unified XDR and SIEM protection for… CWE-476