Stack-based Buffer Overflow Vulnerability in FreeType Library

CVE-2014-2240

Summary

A stack-based buffer overflow vulnerability exists in the cf2_hintmap_build function within the FreeType library, prior to version 2.5.3. This flaw allows attackers to create a malicious font file containing a large number of stem hints, potentially leading to a denial of service through application crashes and the possibility of executing arbitrary code on the affected system.

References