CVE-2010-2498
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.
- EPSS
- 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:mac_os_x
- canonical:ubuntu_linux
- debian:debian_linux
- freetype:freetype
References
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
- http://marc.info/?l=oss-security&m=127905701201340&w=2
- http://marc.info/?l=oss-security&m=127909326909362&w=2