https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:51:28.578835+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-01048 cnvd-2015-01048 2026-10-03T20:51:28.704196+00:00 cnvd-2015-01048 https://cve.radiocsirt.org/vuln/euvd-2026-104015 EUVD-2026-104015 2026-10-03T20:51:28.704253+00:00 EUVD-2026-104015 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9663 fkie_cve-2014-9663 2026-10-03T20:51:28.704290+00:00

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.

 https://cve.radiocsirt.org/vuln/ghsa-r37h-q72r-cxgq GHSA-r37h-q72r-cxgq 2026-10-03T20:51:28.704336+00:00

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.

 https://cve.radiocsirt.org/vuln/gsd-2014-9663 gsd-2014-9663 2026-10-03T20:51:28.704353+00:00 gsd-2014-9663 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10172-1 openSUSE-SU-2024:10172-1 — ft2demos-2.7-1.1 on GA media 2026-10-03T20:51:28.704364+00:00

ft2demos-2.7-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2015:0455-1 SUSE-SU-2015:0455-1 — Security update for freetype2 2026-10-03T20:51:28.704399+00:00

Security update for freetype2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9663 UBUNTU-CVE-2014-9663 2026-10-03T20:51:28.704425+00:00

Affected: Ubuntu:14.04:LTS: freetype

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.