CVE-2015-9382

Published: Sep 3, 2019

Modified: Aug 6, 2024

PUBLISHED

Description

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73

x_refsource_MISC

https://savannah.nongnu.org/bugs/?45922

x_refsource_MISC

[debian-lts-announce] 20190904 [SECURITY] [DLA 1909-1] freetype security update

mailing-list

x_refsource_MLIST

USN-4126-2

vendor-advisory

x_refsource_UBUNTU

RHSA-2019:4254

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-9382

Description

Affected Products

References