⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2017-7858

CRITICAL · 9.8 CVSS Gepubliceerd: 14-04-2017 CWE-787

Beschrijving

FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.

Vendors

Freetype

Affected products

Freetype

References

git.savannah.gnu.org
www.securityfocus.com
bugs.chromium.org
security.gentoo.org
www.oracle.com