Skip to content
OpenAdvisories
Unscored DSA-2070-1 7 CVEs

freetype - several vulnerabilities

Published Jul 14, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 freetype 2.3.7-2+lenny2

Vulnerabilities 7

  • Unscored —

    Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (appl…

  • Unscored —

    The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hi…

  • Unscored —

    Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attacker…

  • Unscored —

    Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers …

  • Unscored —

    Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remo…

  • Unscored —

    Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytec…

  • Unscored —

    Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service…