CVE-2017-8105 — Out-of-bounds Write in Freetype
Severity
9.8CRITICALNVD
EPSS
1.6%
top 18.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 24
Latest updateMay 13
Description
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages3 packages
Also affects: Debian Linux 8.0
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-3f3f-jhpf-w85x: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in↗2022-05-13
OSV▶
CVE-2017-8105: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in↗2017-04-24
📋Vendor Advisories
3💬Community
4Bugzilla▶
CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings [fedora-all]↗2017-04-28
Bugzilla▶
CVE-2017-8105 mingw-freetype: freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings [fedora-all]↗2017-04-28
Bugzilla▶
CVE-2017-8105 freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings↗2017-04-28
Bugzilla▶
CVE-2017-8105 mingw-freetype: freetype: heap-based buffer overflow related to the t1_decoder_parse_charstrings [epel-7]↗2017-04-28