Skip to content
OpenAdvisories
Unscored DTSA-139-1 3 CVEs

freetype - multiple vulnerabilities

Published Jun 20, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 freetype 2.3.5-1+lenny1

Vulnerabilities 3

  • Unscored —

    Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted s…

  • Unscored —

    FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" fiel…

  • Unscored —

    Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1…