CVE-2014-9667

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial…

published February 8, 2015

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03487 · 89.0th percentile
Published
2015-02-08T11:00Z
EPSS history
Timeline
  • 08 FEB 11:00Z
    sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial…
    cvelistv5