CVE-2010-2520

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote…

published August 19, 2010

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05709 · 93.0th percentile
Published
2010-08-19T17:43Z
EPSS history
Timeline
  • 19 AUG 17:43Z
    Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote…
    cvelistv5