İçeriğe atla
Noroxi

FreeType kayıtları

freetype üreticisine ait 95 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %2,1
Silahlaştırılmış
2 · %2,1
Pre-auth RCE
47
Düzeltme kaydı olan
%97,9
Yayından KEV’e ortanca
211 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

95 kayıt
  • CVE-2020-15999
    81Hemen

    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption vi

    KritikCVSS 9,6KEVSilahlaştırılmışEPSS %44

    google · chrome2 Kas 2020

  • CVE-2025-27363
    70Bu hafta

    An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %28

    freetype · freetype11 Mar 2025

  • CVE-2012-1126
    42Planlayın

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 10,0İstismar yokEPSS %6

    freetype · freetype25 Nis 2012

  • CVE-2011-2895
    40Planlayın

    The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress

    KritikCVSS 9,3İstismar yokEPSS %8

    x · libxfont19 Ağu 2011

  • CVE-2017-8105
    40Planlayın

    FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings f

    KritikCVSS 9,8İstismar yokEPSS %4

    freetype · freetype24 Nis 2017

  • CVE-2017-7864
    40Planlayın

    FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in true

    KritikCVSS 9,8İstismar yokEPSS %4

    freetype · freetype14 Nis 2017

  • CVE-2016-10328
    40Planlayın

    FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff

    KritikCVSS 9,8İstismar yokEPSS %4

    freetype · freetype14 Nis 2017

  • CVE-2017-8287
    40Planlayın

    FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour funct

    KritikCVSS 9,8İstismar yokEPSS %4

    freetype · freetype26 Nis 2017

  • CVE-2017-7857
    40Planlayın

    FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in true

    KritikCVSS 9,8İstismar yokEPSS %4

    freetype · freetype14 Nis 2017

  • CVE-2017-7858
    40Planlayın

    FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face f

    KritikCVSS 9,8İstismar yokEPSS %3

    freetype · freetype14 Nis 2017

  • CVE-2014-9746
    40Planlayın

    The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix func

    KritikCVSS 9,8İstismar yokEPSS %3

    freetype · freetype7 Haz 2016

  • CVE-2015-9290
    40Planlayın

    In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new

    KritikCVSS 9,8İstismar yokEPSS %3

    freetype · freetype30 Tem 2019

  • CVE-2022-27404
    40Planlayın

    FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

    KritikCVSS 9,8İstismar yokEPSS %3

    freetype · freetype22 Nis 2022

  • CVE-2010-3311
    39İzleyin

    Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial

    KritikCVSS 9,3İstismar yokEPSS %7

    freetype · freetype7 Oca 2011

  • CVE-2011-0226
    39İzleyin

    Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.

    KritikCVSS 9,3İstismar yokEPSS %7

    freetype · freetype19 Tem 2011

  • CVE-2012-1144
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1138
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1135
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1133
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1128
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1134
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %5

    freetype · freetype25 Nis 2012

  • CVE-2012-1140
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %4

    freetype · freetype25 Nis 2012

  • CVE-2012-1130
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %4

    freetype · freetype25 Nis 2012

  • CVE-2012-1139
    38İzleyin

    Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c

    KritikCVSS 9,3İstismar yokEPSS %4

    freetype · freetype25 Nis 2012

  • CVE-2012-1142
    38İzleyin

    FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv

    KritikCVSS 9,3İstismar yokEPSS %4

    freetype · freetype25 Nis 2012