Skip to content
OpenAdvisories
Unscored USN-6062-1 1 CVE

freetype vulnerability

Published May 9, 2023 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FreeType incorrectly handled certain malformed
font files. If a user were tricked into using a specially crafted font
file, a remote attacker could cause FreeType to crash, or possibly execute
arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS freetype 2.10.1-2ubuntu0.3
Ubuntu · 22.04 LTS 22.04:LTS freetype 2.11.1+dfsg-1ubuntu0.2

Vulnerabilities 1

  • Unscored —
    CVE-2023-2004 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

    freetype Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-2004