CVE-2009-0946
No CVSS score yet. EPSS 8.5% chance of exploitation in the next 30 days.
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
- EPSS
- 8.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:iphone_os
- apple:mac_os_x
- apple:mac_os_x_server
- apple:safari
- canonical:ubuntu_linux
- debian:debian_linux
- freetype:freetype
- opensuse:opensuse
- suse:linux_enterprise_server
References
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html