FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
{ "urgency": "medium" }
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1807.json"