https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:45:24 +0000 https://vulnerability.circl.lu/vuln/cve-2016-10244 <p>The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.</p> <p>The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.</p> https://vulnerability.circl.lu/vuln/cve-2016-10244 https://vulnerability.circl.lu/vuln/usn-3237-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype, Ubuntu:16.04:LTS: freetype</p> <p>It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype, Ubuntu:16.04:LTS: freetype</p> <p>It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/usn-3237-1