Skip to content
OpenAdvisories
Unscored DSA-2105-1 7 CVEs

freetype - several vulnerabilities

Published Sep 7, 2010 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 freetype 2.3.7-2+lenny3

Vulnerabilities 7

  • Unscored —
    CVE-2010-1797 Public exploit EPSS 34%

    Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interp…

    freetype Debian
  • Unscored —
    CVE-2010-2541

    Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a de…

    freetype Debian
  • Unscored —
    CVE-2010-2805

    The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain positi…

    freetype Debian
  • Unscored —
    CVE-2010-2806

    Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers…

    freetype Debian
  • Unscored —
    CVE-2010-2807

    FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause …

    freetype Debian
  • Unscored —
    CVE-2010-2808

    Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attacker…

    freetype Debian
  • Unscored —
    CVE-2010-3053

    bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a cr…

    freetype Debian