Unscored DLA-1909-1 3 CVEs

freetype - security update

Published Sep 4, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	freetype	2.5.2-3+deb8u4

Vulnerabilities 3

Unscored —

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.

freetype freetype Debian Ubuntu

Sep 3, 2019
Unscored —

CVE-2015-9382

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is misha…

freetype freetype Debian Ubuntu

Sep 3, 2019
Unscored —

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.

freetype freetype Debian Ubuntu

Sep 3, 2019