CVE-2015-9381
High · 8.8CVSS
8.8
EPSS
1.9%
Published
Sep 3, 2019
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A bug in a widely used font library can let attackers peek at extra computer memory or crash programs when people open certain documents, creating risks of data exposure or downtime.
Exploit Available
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Low
- Impact
- Data Exposure
- Component
- Library
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Heap-based buffer over-read in T1_Get_Private_Dict within type1/t1parse.c allows reading past allocated memory boundaries during Type 1 font private dictionary parsing.
Why it matters to the business
Systems relying on FreeType for font rendering face crash risks or potential memory disclosure when handling malicious Type 1 fonts, impacting document viewers, PDF processors, and Linux distributions with high ecosystem prevalence.
How an attack unfolds
An attacker supplies a crafted Type 1 font file that triggers the over-read during parsing in T1_Get_Private_Dict; with exploit code publicly available since publication, this can be delivered via documents or web content to leak memory contents or destabilize the process.
How to fix it
Upgrade FreeType to version 2.6.1 or later across all affected products including Debian Linux packages; rebuild dependent applications against the fixed library.
How to confirm the fix worked
Verify installed FreeType version is 2.6.1+, run regression tests with known Type 1 font samples, and confirm absence of the vulnerable t1parse.c code path.
Typical attack path
- Craft malicious Type 1 font embedding oversized private dictionary data
- Deliver font via email attachment, web page, or document
- Victim application loads and parses the font using vulnerable FreeType
- T1_Get_Private_Dict performs out-of-bounds read exposing memory or causing crash
How to detect it
Monitor application logs and crash reports for font parsing failures involving type1/t1parse.c; inspect process memory dumps or error traces referencing T1_Get_Private_Dict on systems handling untrusted fonts.
- T1_Get_Private_Dict
- type1/t1parse.c
- heap buffer over-read freetype
What your security team should do
- Prioritize immediate upgrade of FreeType given public exploit availability and 2591 days since publication
- Inventory all systems using FreeType or Debian packages for vulnerable versions
- Block or sandbox untrusted Type 1 fonts in document processing workflows
The record
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | freetype | 0 | 2.6.1-0.1 |
| Debian:12 | freetype | 0 | 2.6.1-0.1 |
| Debian:13 | freetype | 0 | 2.6.1-0.1 |
| Debian:8 | freetype | 0 | 2.5.2-3+deb8u4 |
| Red Hat:enterprise_linux:6::client | freetype | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::client | freetype-debuginfo | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::client | freetype-demos | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::client | freetype-devel | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::computenode | freetype | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::computenode | freetype-debuginfo | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::computenode | freetype-demos | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::computenode | freetype-devel | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::server | freetype | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::server | freetype-debuginfo | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::server | freetype-demos | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::server | freetype-devel | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::workstation | freetype | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::workstation | freetype-debuginfo | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::workstation | freetype-demos | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:6::workstation | freetype-devel | 0 | 0:2.3.11-19.el6_10 |
| Red Hat:enterprise_linux:7::client | PackageKit | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-command-not-found | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-cron | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-debuginfo | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-glib | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-glib-devel | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-gstreamer-plugin | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-gtk3-module | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-yum | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | PackageKit-yum-plugin | 0 | 0:1.1.10-1.el7 |
| Red Hat:enterprise_linux:7::client | accountsservice | 0 | 0:0.6.50-2.el7 |
| Red Hat:enterprise_linux:7::client | accountsservice-debuginfo | 0 | 0:0.6.50-2.el7 |
| Red Hat:enterprise_linux:7::client | accountsservice-devel | 0 | 0:0.6.50-2.el7 |
| Red Hat:enterprise_linux:7::client | accountsservice-libs | 0 | 0:0.6.50-2.el7 |
| Red Hat:enterprise_linux:7::client | adwaita-cursor-theme | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | adwaita-gtk2-theme | 0 | 0:3.28-2.el7 |
| Red Hat:enterprise_linux:7::client | adwaita-icon-theme | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | adwaita-icon-theme-devel | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | appstream-data | 0 | 0:7-20180614.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-atk | 0 | 0:2.26.2-1.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-atk-debuginfo | 0 | 0:2.26.2-1.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-atk-devel | 0 | 0:2.26.2-1.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-core | 0 | 0:2.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-core-debuginfo | 0 | 0:2.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | at-spi2-core-devel | 0 | 0:2.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | atk | 0 | 0:2.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | atk-debuginfo | 0 | 0:2.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | atk-devel | 0 | 0:2.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | baobab | 0 | 0:3.28.0-2.el7 |
| Red Hat:enterprise_linux:7::client | baobab-debuginfo | 0 | 0:3.28.0-2.el7 |
| Red Hat:enterprise_linux:7::client | bolt | 0 | 0:0.4-3.el7 |
| Red Hat:enterprise_linux:7::client | bolt-debuginfo | 0 | 0:0.4-3.el7 |
| Red Hat:enterprise_linux:7::client | brasero | 0 | 0:3.12.2-5.el7 |
| Red Hat:enterprise_linux:7::client | brasero-debuginfo | 0 | 0:3.12.2-5.el7 |
| Red Hat:enterprise_linux:7::client | brasero-devel | 0 | 0:3.12.2-5.el7 |
| Red Hat:enterprise_linux:7::client | brasero-libs | 0 | 0:3.12.2-5.el7 |
| Red Hat:enterprise_linux:7::client | brasero-nautilus | 0 | 0:3.12.2-5.el7 |
| Red Hat:enterprise_linux:7::client | cairo | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cairo-debuginfo | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cairo-devel | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cairo-gobject | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cairo-gobject-devel | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cairo-tools | 0 | 0:1.15.12-3.el7 |
| Red Hat:enterprise_linux:7::client | cheese | 0 | 2:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | cheese-debuginfo | 0 | 2:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | cheese-libs | 0 | 2:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | cheese-libs-devel | 0 | 2:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | clutter-gst3 | 0 | 0:3.0.26-1.el7 |
| Red Hat:enterprise_linux:7::client | clutter-gst3-debuginfo | 0 | 0:3.0.26-1.el7 |
| Red Hat:enterprise_linux:7::client | clutter-gst3-devel | 0 | 0:3.0.26-1.el7 |
| Red Hat:enterprise_linux:7::client | compat-exiv2-023 | 0 | 0:0.23-2.el7 |
| Red Hat:enterprise_linux:7::client | compat-exiv2-023-debuginfo | 0 | 0:0.23-2.el7 |
| Red Hat:enterprise_linux:7::client | compat-libical1 | 0 | 0:1.0.1-2.el7 |
| Red Hat:enterprise_linux:7::client | control-center | 0 | 1:3.28.1-4.el7 |
| Red Hat:enterprise_linux:7::client | control-center-debuginfo | 0 | 1:3.28.1-4.el7 |
| Red Hat:enterprise_linux:7::client | control-center-filesystem | 0 | 1:3.28.1-4.el7 |
| Red Hat:enterprise_linux:7::client | dconf | 0 | 0:0.28.0-4.el7 |
| Red Hat:enterprise_linux:7::client | dconf-debuginfo | 0 | 0:0.28.0-4.el7 |
| Red Hat:enterprise_linux:7::client | dconf-devel | 0 | 0:0.28.0-4.el7 |
| Red Hat:enterprise_linux:7::client | dconf-editor | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | dconf-editor-debuginfo | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | devhelp | 0 | 1:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | devhelp-debuginfo | 0 | 1:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | devhelp-devel | 0 | 1:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | devhelp-libs | 0 | 1:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | ekiga | 0 | 0:4.0.1-8.el7 |
| Red Hat:enterprise_linux:7::client | ekiga-debuginfo | 0 | 0:4.0.1-8.el7 |
| Red Hat:enterprise_linux:7::client | empathy | 0 | 0:3.12.13-1.el7 |
| Red Hat:enterprise_linux:7::client | empathy-debuginfo | 0 | 0:3.12.13-1.el7 |
| Red Hat:enterprise_linux:7::client | eog | 0 | 0:3.28.3-1.el7 |
| Red Hat:enterprise_linux:7::client | eog-debuginfo | 0 | 0:3.28.3-1.el7 |
| Red Hat:enterprise_linux:7::client | eog-devel | 0 | 0:3.28.3-1.el7 |
| Red Hat:enterprise_linux:7::client | evince | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-browser-plugin | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-debuginfo | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-devel | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-dvi | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-libs | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evince-nautilus | 0 | 0:3.28.2-5.el7 |
| Red Hat:enterprise_linux:7::client | evolution | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-bogofilter | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-debuginfo | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-devel | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-doc | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-langpacks | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-perl | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-data-server-tests | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-debuginfo | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-devel | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-devel-docs | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-ews | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-ews-debuginfo | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-ews-langpacks | 0 | 0:3.28.5-1.el7 |
| Red Hat:enterprise_linux:7::client | evolution-help | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-langpacks | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-mapi | 0 | 0:3.28.3-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-mapi-debuginfo | 0 | 0:3.28.3-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-mapi-langpacks | 0 | 0:3.28.3-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-pst | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-spamassassin | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | evolution-tests | 0 | 0:3.28.5-2.el7 |
| Red Hat:enterprise_linux:7::client | file-roller | 0 | 0:3.28.1-2.el7 |
| Red Hat:enterprise_linux:7::client | file-roller-debuginfo | 0 | 0:3.28.1-2.el7 |
| Red Hat:enterprise_linux:7::client | file-roller-nautilus | 0 | 0:3.28.1-2.el7 |
| Red Hat:enterprise_linux:7::client | flatpak | 0 | 0:1.0.2-2.el7 |
| Red Hat:enterprise_linux:7::client | flatpak-builder | 0 | 0:1.0.0-2.el7 |
| Red Hat:enterprise_linux:7::client | flatpak-debuginfo | 0 | 0:1.0.2-2.el7 |
| Red Hat:enterprise_linux:7::client | flatpak-devel | 0 | 0:1.0.2-2.el7 |
| Red Hat:enterprise_linux:7::client | flatpak-libs | 0 | 0:1.0.2-2.el7 |
| Red Hat:enterprise_linux:7::client | folks | 0 | 1:0.11.4-1.el7 |
| Red Hat:enterprise_linux:7::client | folks-debuginfo | 0 | 1:0.11.4-1.el7 |
| Red Hat:enterprise_linux:7::client | folks-devel | 0 | 1:0.11.4-1.el7 |
| Red Hat:enterprise_linux:7::client | folks-tools | 0 | 1:0.11.4-1.el7 |
| Red Hat:enterprise_linux:7::client | fontconfig | 0 | 0:2.13.0-4.3.el7 |
| Red Hat:enterprise_linux:7::client | fontconfig-debuginfo | 0 | 0:2.13.0-4.3.el7 |
| Red Hat:enterprise_linux:7::client | fontconfig-devel | 0 | 0:2.13.0-4.3.el7 |
| Red Hat:enterprise_linux:7::client | fontconfig-devel-doc | 0 | 0:2.13.0-4.3.el7 |
| Red Hat:enterprise_linux:7::client | freetype | 0 | 0:2.8-12.el7 |
| Red Hat:enterprise_linux:7::client | freetype-debuginfo | 0 | 0:2.8-12.el7 |
| Red Hat:enterprise_linux:7::client | freetype-demos | 0 | 0:2.8-12.el7 |
| Red Hat:enterprise_linux:7::client | freetype-devel | 0 | 0:2.8-12.el7 |
| Red Hat:enterprise_linux:7::client | fribidi | 0 | 0:1.0.2-1.el7 |
| Red Hat:enterprise_linux:7::client | fribidi-debuginfo | 0 | 0:1.0.2-1.el7 |
| Red Hat:enterprise_linux:7::client | fribidi-devel | 0 | 0:1.0.2-1.el7 |
| Red Hat:enterprise_linux:7::client | fwupd | 0 | 0:1.0.8-4.el7 |
| Red Hat:enterprise_linux:7::client | fwupd-debuginfo | 0 | 0:1.0.8-4.el7 |
| Red Hat:enterprise_linux:7::client | fwupd-devel | 0 | 0:1.0.8-4.el7 |
| Red Hat:enterprise_linux:7::client | fwupdate | 0 | 0:12-5.el7 |
| Red Hat:enterprise_linux:7::client | fwupdate-debuginfo | 0 | 0:12-5.el7 |
| Red Hat:enterprise_linux:7::client | fwupdate-devel | 0 | 0:12-5.el7 |
| Red Hat:enterprise_linux:7::client | fwupdate-efi | 0 | 0:12-5.el7 |
| Red Hat:enterprise_linux:7::client | fwupdate-libs | 0 | 0:12-5.el7 |
| Red Hat:enterprise_linux:7::client | gcr | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | gcr-debuginfo | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | gcr-devel | 0 | 0:3.28.0-1.el7 |
| Red Hat:enterprise_linux:7::client | gdk-pixbuf2 | 0 | 0:2.36.12-3.el7 |
| Red Hat:enterprise_linux:7::client | gdk-pixbuf2-debuginfo | 0 | 0:2.36.12-3.el7 |
| Red Hat:enterprise_linux:7::client | gdk-pixbuf2-devel | 0 | 0:2.36.12-3.el7 |
| Red Hat:enterprise_linux:7::client | gdk-pixbuf2-tests | 0 | 0:2.36.12-3.el7 |
| Red Hat:enterprise_linux:7::client | gdm | 0 | 1:3.28.2-9.el7 |
| Red Hat:enterprise_linux:7::client | gdm-debuginfo | 0 | 1:3.28.2-9.el7 |
| Red Hat:enterprise_linux:7::client | gdm-devel | 0 | 1:3.28.2-9.el7 |
| Red Hat:enterprise_linux:7::client | gdm-pam-extensions-devel | 0 | 1:3.28.2-9.el7 |
| Red Hat:enterprise_linux:7::client | gedit | 0 | 2:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-debuginfo | 0 | 2:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-devel | 0 | 2:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-bookmarks | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-bracketcompletion | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-charmap | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-codecomment | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-colorpicker | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-colorschemer | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-commander | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-drawspaces | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-findinfiles | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-joinlines | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-multiedit | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-smartspaces | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-synctex | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-terminal | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-textsize | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-translate | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugin-wordcompletion | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugins | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugins-data | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | gedit-plugins-debuginfo | 0 | 0:3.28.1-1.el7 |
| Red Hat:enterprise_linux:7::client | geoclue2 | 0 | 0:2.4.8-1.el7 |
| Red Hat:enterprise_linux:7::client | geoclue2-debuginfo | 0 | 0:2.4.8-1.el7 |
| Red Hat:enterprise_linux:7::client | geoclue2-demos | 0 | 0:2.4.8-1.el7 |
| Red Hat:enterprise_linux:7::client | geoclue2-devel | 0 | 0:2.4.8-1.el7 |
| Red Hat:enterprise_linux:7::client | geoclue2-libs | 0 | 0:2.4.8-1.el7 |
| Red Hat:enterprise_linux:7::client | geocode-glib | 0 | 0:3.26.0-2.el7 |
| Red Hat:enterprise_linux:7::client | geocode-glib-debuginfo | 0 | 0:3.26.0-2.el7 |
| Red Hat:enterprise_linux:7::client | geocode-glib-devel | 0 | 0:3.26.0-2.el7 |
| Red Hat:enterprise_linux:7::client | gjs | 0 | 0:1.52.3-1.el7 |
| Red Hat:enterprise_linux:7::client | gjs-debuginfo | 0 | 0:1.52.3-1.el7 |
| Red Hat:enterprise_linux:7::client | gjs-devel | 0 | 0:1.52.3-1.el7 |
| Red Hat:enterprise_linux:7::client | gjs-tests | 0 | 0:1.52.3-1.el7 |
| Red Hat:enterprise_linux:7::client | glade | 0 | 0:3.22.1-1.el7 |
Related vulnerabilities
- CVE-2025-27363 An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of… Also affects freetype
- CVE-2022-27406 FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a… Also affects freetype
- CVE-2022-27405 FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a… Also affects freetype
- CVE-2020-15999 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote… Also affects freetype
- CVE-2015-9383 FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in… Also affects freetype
- CVE-2017-8105 FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer… Also affects freetype
- CVE-2016-10244 The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure… Also affects freetype
- CVE-2014-9745 The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote… Also affects freetype