Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*

part: a version: 2.3.9 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.995059
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.995060
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.995062

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2240 vulnerable 2026-06-08 05:05:28.023734 Details available
Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Published: 2014-03-12T14:00:00.000Z
Updated: 2024-08-06T10:05:59.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5670 vulnerable 2026-06-08 05:02:57.975246 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5669 vulnerable 2026-06-08 05:02:57.973112 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5668 vulnerable 2026-06-08 05:02:57.961853 Details available
FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1144 vulnerable 2026-06-08 05:00:47.690004 Details available
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Published: 2012-04-25T10:00:00.000Z
Updated: 2024-08-06T18:45:27.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1143 vulnerable 2026-06-08 05:00:47.688093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1142 vulnerable 2026-06-08 05:00:47.686018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1141 vulnerable 2026-06-08 05:00:47.683189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1140 vulnerable 2026-06-08 05:00:47.681390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1139 vulnerable 2026-06-08 05:00:47.679609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1138 vulnerable 2026-06-08 05:00:47.677633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1137 vulnerable 2026-06-08 05:00:47.675578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1136 vulnerable 2026-06-08 05:00:47.673828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1135 vulnerable 2026-06-08 05:00:47.671989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1134 vulnerable 2026-06-08 05:00:47.670055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1133 vulnerable 2026-06-08 05:00:47.668215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1132 vulnerable 2026-06-08 05:00:47.666273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1131 vulnerable 2026-06-08 05:00:47.664466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1130 vulnerable 2026-06-08 05:00:47.662714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1129 vulnerable 2026-06-08 05:00:47.660875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1128 vulnerable 2026-06-08 05:00:47.659048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1127 vulnerable 2026-06-08 05:00:47.657239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1126 vulnerable 2026-06-08 05:00:47.639488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0226 vulnerable 2026-06-08 04:56:36.103617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3855 vulnerable 2026-06-08 04:55:17.611404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3814 vulnerable 2026-06-08 04:55:17.128462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3311 vulnerable 2026-06-08 04:55:14.106518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3054 vulnerable 2026-06-08 04:55:12.389699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3053 vulnerable 2026-06-08 04:55:12.386929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.