GCVE - cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*

part: a version: 2.4.8 update: *

Vendor	Freetype (`3ee64c55-8e70-5aed-bb46-2872b7a192c1`)
Product	Freetype (`e391fb37-5a9a-519e-808f-1334610140ce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/freetype/freetype`	purl2cpe	2026-06-01 10:11:50.995115
`pkg:gnu/freetype`	purl2cpe	2026-06-01 10:11:50.995117
`pkg:rpm/fedora/freetype`	purl2cpe	2026-06-01 10:11:50.995118

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2240`	vulnerable	2026-06-08 05:05:28.030526	Details available Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file. Published: 2014-03-12T14:00:00.000Z Updated: 2024-08-06T10:05:59.888Z Open on db.gcve.eu Reference links http://secunia.com/advisories/57291 http://www.securitytracker.com/id/1029895 http://www.ubuntu.com/usn/USN-2148-1 http://secunia.com/advisories/57447 http://www.freetype.org/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5670`	vulnerable	2026-06-08 05:02:57.975499	Details available The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value. Published: 2013-01-24T21:00:00.000Z Updated: 2024-08-06T21:14:16.322Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027921 http://www.freetype.org/ http://www.ubuntu.com/usn/USN-1686-1 http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html http://www.openwall.com/lists/oss-security/2012/12/25/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5669`	vulnerable	2026-06-08 05:02:57.973562	Details available The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read. Published: 2013-01-24T21:00:00.000Z Updated: 2024-08-06T21:14:16.354Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027921 http://www.freetype.org/ http://www.ubuntu.com/usn/USN-1686-1 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5668`	vulnerable	2026-06-08 05:02:57.970345	Details available FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function. Published: 2013-01-24T21:00:00.000Z Updated: 2024-08-06T21:14:16.408Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1027921 http://www.freetype.org/ https://savannah.nongnu.org/bugs/?37905 http://www.ubuntu.com/usn/USN-1686-1 http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.