CVE-2012-4190

no score yetEPSS 4.2%

The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2012-10-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cyanogenmod:cyanogenmod
mozilla:firefox

References

http://www.mozilla.org/security/announce/2012/mfsa2012-88.html
http://www.securitytracker.com/id?1027653
https://bugzilla.mozilla.org/show_bug.cgi?id=790139
https://exchange.xforce.ibmcloud.com/vulnerabilities/79208
http://www.mozilla.org/security/announce/2012/mfsa2012-88.html

Check your stack JSON