NULL Pointer Dereference in FreeType 2 Affects Multiple Platforms
CVE-2018-6942

6.5MEDIUM

Key Information:

Vendor: Freetype
Status: Freetype
Vendor: CVE Published:; 13 February 2018

What is CVE-2018-6942?

An issue has been identified in the FreeType 2 library where a NULL pointer dereference occurs within the Ins_GETVARIATION() function of the ttinterp.c file. This vulnerability allows attackers to exploit crafted font files, potentially leading to Denial of Service (DoS) conditions. Affected versions include FreeType 2 through 2.9. It is important for users and organizations using FreeType to apply necessary updates or mitigations to prevent exploitation.