Heap-based Buffer Overflow in FreeType Demo Programs
CVE-2022-31782

7.8HIGH

Key Information:

Vendor

Freedesktop

Status
Freetype Demo Programs
Vendor
CVE Published:
2 June 2022
đź”” Create Freedesktop Vulnerability Alert

What is CVE-2022-31782?

A heap-based buffer overflow vulnerability exists in the FreeType Demo Programs through version 2.12.1. This flaw can allow an attacker to execute arbitrary code or crash the application, potentially leading to further exploitation of the system or service. Users are advised to review and apply necessary mitigations to safeguard against potential risks related to this vulnerability.

References

https://gitlab.freedesktop.org/freetype/freetype-demos/-/...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-31782 : Heap-based Buffer Overflow in FreeType Demo Programs