CVE-2014-9747

The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which…

published June 7, 2016

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03015 · 87.3th percentile
Published
2016-06-07T14:00Z
EPSS history
Timeline
  • 07 JUN 14:00Z
    The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which…
    cvelistv5