Heap-based Buffer Over-read in FreeType Affects Multiple Platforms

CVE-2015-9383

Summary

A vulnerability in the FreeType Library prior to version 2.6.2 allows for heap-based buffer over-reads, particularly in the tt_cmap14_validate function, which can potentially lead to arbitrary code execution or application crashes. This flaw can be exploited by processing specially crafted font files, making affected systems at risk if they handle untrusted inputs.

References