https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:24:47.231905+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2016-avi-370 certfr-2016-avi-370 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Android (Nexus)</span>. Certaines d'entr… 2026-10-02T22:24:47.314466+00:00 certfr-2016-avi-370 https://cve.radiocsirt.org/vuln/cnvd-2015-00991 cnvd-2015-00991 2026-10-02T22:24:47.314512+00:00 cnvd-2015-00991 https://cve.radiocsirt.org/vuln/euvd-2026-104086 EUVD-2026-104086 2026-10-02T22:24:47.314538+00:00 EUVD-2026-104086 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9675 fkie_cve-2014-9675 2026-10-02T22:24:47.314559+00:00

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

 https://cve.radiocsirt.org/vuln/ghsa-gp42-2rqf-vfq6 GHSA-gp42-2rqf-vfq6 2026-10-02T22:24:47.314599+00:00

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

 https://cve.radiocsirt.org/vuln/gsd-2014-9675 gsd-2014-9675 2026-10-02T22:24:47.314626+00:00 gsd-2014-9675 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10172-1 openSUSE-SU-2024:10172-1 — ft2demos-2.7-1.1 on GA media 2026-10-02T22:24:47.314644+00:00

ft2demos-2.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2015:0455-1 SUSE-SU-2015:0455-1 — Security update for freetype2 2026-10-02T22:24:47.314691+00:00

Security update for freetype2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9675 UBUNTU-CVE-2014-9675 2026-10-02T22:24:47.314728+00:00

Affected: Ubuntu:14.04:LTS: freetype

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.