Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*

part: a version: 2.4.1 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.995067
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.995068
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.995070

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2240 vulnerable 2026-06-08 05:05:28.026695 Details available
Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Published: 2014-03-12T14:00:00.000Z
Updated: 2024-08-06T10:05:59.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5670 vulnerable 2026-06-08 05:02:57.975353 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5669 vulnerable 2026-06-08 05:02:57.973228 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5668 vulnerable 2026-06-08 05:02:57.965530 Details available
FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1144 vulnerable 2026-06-08 05:00:47.690082 Details available
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Published: 2012-04-25T10:00:00.000Z
Updated: 2024-08-06T18:45:27.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1143 vulnerable 2026-06-08 05:00:47.688177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1142 vulnerable 2026-06-08 05:00:47.686099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1141 vulnerable 2026-06-08 05:00:47.683268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1140 vulnerable 2026-06-08 05:00:47.681470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1139 vulnerable 2026-06-08 05:00:47.679691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1138 vulnerable 2026-06-08 05:00:47.677713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1137 vulnerable 2026-06-08 05:00:47.675655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1136 vulnerable 2026-06-08 05:00:47.673908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1135 vulnerable 2026-06-08 05:00:47.672068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1134 vulnerable 2026-06-08 05:00:47.670135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1133 vulnerable 2026-06-08 05:00:47.668295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1132 vulnerable 2026-06-08 05:00:47.666350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1131 vulnerable 2026-06-08 05:00:47.664543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1130 vulnerable 2026-06-08 05:00:47.662798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1129 vulnerable 2026-06-08 05:00:47.660954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1128 vulnerable 2026-06-08 05:00:47.659127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1127 vulnerable 2026-06-08 05:00:47.657322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1126 vulnerable 2026-06-08 05:00:47.642649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0226 vulnerable 2026-06-08 04:56:36.107068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3855 vulnerable 2026-06-08 04:55:17.611495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3814 vulnerable 2026-06-08 04:55:17.128543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3054 vulnerable 2026-06-08 04:55:12.390961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.