Unscored USN-4126-1 1 CVE

freetype vulnerability

Published Sep 9, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FreeType incorrectly handled certain font files.
An attacker could possibly use this issue to access sensitive information.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	freetype	2.6.1-0.1ubuntu2.4

Vulnerabilities 1

Unscored —

CVE-2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.

freetype freetype Debian Ubuntu

Sep 3, 2019

References

report
https://ubuntu.com/security/CVE-2015-9383