Heap-based Buffer Over-read in FreeType Affects Multiple Platforms
CVE-2015-9383

6.5MEDIUM

Key Information:

Vendor: Freetype
Status: Freetype
Vendor: CVE Published:; 3 September 2019

What is CVE-2015-9383?

A vulnerability in the FreeType Library prior to version 2.6.2 allows for heap-based buffer over-reads, particularly in the tt_cmap14_validate function, which can potentially lead to arbitrary code execution or application crashes. This flaw can be exploited by processing specially crafted font files, making affected systems at risk if they handle untrusted inputs.