https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:59:49 +0000 https://vulnerability.circl.lu/vuln/cve-2014-9745 <p>The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a &#34;broken number-with-base&#34; in a Postscript stream, as demonstrated by 8#garbage.</p> <p>The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a &#34;broken number-with-base&#34; in a Postscript stream, as demonstrated by 8#garbage.</p> https://vulnerability.circl.lu/vuln/cve-2014-9745 https://vulnerability.circl.lu/vuln/usn-2739-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype</p> <p>It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype</p> <p>It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory.</p> https://vulnerability.circl.lu/vuln/usn-2739-1