Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*

part: a version: 2.1.8 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.971669
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.971670
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.971671

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2240 vulnerable 2026-06-08 05:05:28.012514 Details available
Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.
Published: 2014-03-12T14:00:00.000Z
Updated: 2024-08-06T10:05:59.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5670 vulnerable 2026-06-08 05:02:57.974922 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5669 vulnerable 2026-06-08 05:02:57.972782 Details available
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5668 vulnerable 2026-06-08 05:02:57.949563 Details available
FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an "allocation error" in the bdf_free_font function.
Published: 2013-01-24T21:00:00.000Z
Updated: 2024-08-06T21:14:16.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1144 vulnerable 2026-06-08 05:00:47.689707 Details available
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.
Published: 2012-04-25T10:00:00.000Z
Updated: 2024-08-06T18:45:27.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1143 vulnerable 2026-06-08 05:00:47.687857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1142 vulnerable 2026-06-08 05:00:47.685776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1141 vulnerable 2026-06-08 05:00:47.682952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1140 vulnerable 2026-06-08 05:00:47.681150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1139 vulnerable 2026-06-08 05:00:47.679363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1138 vulnerable 2026-06-08 05:00:47.677392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1137 vulnerable 2026-06-08 05:00:47.675337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1136 vulnerable 2026-06-08 05:00:47.673531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1135 vulnerable 2026-06-08 05:00:47.671754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1134 vulnerable 2026-06-08 05:00:47.669817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1133 vulnerable 2026-06-08 05:00:47.667976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1132 vulnerable 2026-06-08 05:00:47.666028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1131 vulnerable 2026-06-08 05:00:47.664230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1130 vulnerable 2026-06-08 05:00:47.662414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1129 vulnerable 2026-06-08 05:00:47.660632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1128 vulnerable 2026-06-08 05:00:47.658804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1127 vulnerable 2026-06-08 05:00:47.656986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1126 vulnerable 2026-06-08 05:00:47.629619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3855 vulnerable 2026-06-08 04:55:17.611113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3814 vulnerable 2026-06-08 04:55:17.128180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3311 vulnerable 2026-06-08 04:55:14.101066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3053 vulnerable 2026-06-08 04:55:12.377855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1861 vulnerable 2026-06-08 04:48:58.269571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.