https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T06:17:52.503989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2014-9746 CVE-2014-9746 2026-10-26T06:17:52.505559+00:00

The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted font.

 https://cve.radiocsirt.org/vuln/usn-2739-1 USN-2739-1 — freetype vulnerabilities 2026-10-26T06:17:52.505605+00:00

Affected: Ubuntu:14.04:LTS: freetype

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or hang, resulting in a denial of service, or possibly expose uninitialized memory.