https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:04:36 +0000 https://cve.radiocsirt.org/vuln/cve-2014-9675 <p>bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.</p> <p>bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.</p> https://cve.radiocsirt.org/vuln/cve-2014-9675 https://cve.radiocsirt.org/vuln/usn-2510-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype</p> <p>Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freetype</p> <p>Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.</p> https://cve.radiocsirt.org/vuln/usn-2510-1