Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*

part: a version: 2.0.9 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.971510
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.971512
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.971513

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2240 vulnerable 2026-06-08 05:05:28.008610 Details available
Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Published: 2014-03-12T14:00:00.000Z
Updated: 2024-08-06T10:05:59.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5670 vulnerable 2026-06-08 05:02:57.974651 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5669 vulnerable 2026-06-08 05:02:57.972632 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5668 vulnerable 2026-06-08 05:02:57.944264 Details available
FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1144 vulnerable 2026-06-08 05:00:47.689596 Details available
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Published: 2012-04-25T10:00:00.000Z
Updated: 2024-08-06T18:45:27.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1143 vulnerable 2026-06-08 05:00:47.687746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1142 vulnerable 2026-06-08 05:00:47.685658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1141 vulnerable 2026-06-08 05:00:47.682845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1140 vulnerable 2026-06-08 05:00:47.681036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1139 vulnerable 2026-06-08 05:00:47.679248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1138 vulnerable 2026-06-08 05:00:47.677284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1137 vulnerable 2026-06-08 05:00:47.675226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1136 vulnerable 2026-06-08 05:00:47.673421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1135 vulnerable 2026-06-08 05:00:47.671642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1134 vulnerable 2026-06-08 05:00:47.669705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1133 vulnerable 2026-06-08 05:00:47.667865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1132 vulnerable 2026-06-08 05:00:47.665918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1131 vulnerable 2026-06-08 05:00:47.664116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1130 vulnerable 2026-06-08 05:00:47.662305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1129 vulnerable 2026-06-08 05:00:47.660519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1128 vulnerable 2026-06-08 05:00:47.658693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1127 vulnerable 2026-06-08 05:00:47.656872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1126 vulnerable 2026-06-08 05:00:47.624988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3855 vulnerable 2026-06-08 04:55:17.610981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3814 vulnerable 2026-06-08 04:55:17.128057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3311 vulnerable 2026-06-08 04:55:14.100909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3053 vulnerable 2026-06-08 04:55:12.373355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1808 vulnerable 2026-06-08 04:50:21.983852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1861 vulnerable 2026-06-08 04:48:58.266390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.