It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker could use this issue to cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "freetype2-demos", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "freetype2-demos-dbgsym", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "freetype2-doc", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "libfreetype-dev", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "libfreetype6", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "libfreetype6-dbgsym", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "libfreetype6-dev", "binary_version": "2.10.1-2ubuntu0.4" }, { "binary_name": "libfreetype6-udeb", "binary_version": "2.10.1-2ubuntu0.4" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "freetype2-demos", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "freetype2-demos-dbgsym", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "freetype2-doc", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "libfreetype-dev", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "libfreetype6", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "libfreetype6-dbgsym", "binary_version": "2.11.1+dfsg-1ubuntu0.3" }, { "binary_name": "libfreetype6-dev", "binary_version": "2.11.1+dfsg-1ubuntu0.3" } ] }