CVE-2017-7858

CRITICAL

FreeType < 2.7.1 - Out-of-bounds Write in TT_Get_MM_Var and sfnt_init_face

Title source: llm
STIX 2.1

Description

FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201706-14
Issue Tracking, Third Party Advisory, VDB Entry x_refsource_misc
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97682
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuapr2020.html

Scores

CVSS v3 9.8
EPSS 0.0343
EPSS Percentile 87.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
freetype/freetype < 2.7.1
Published Apr 14, 2017
Tracked Since Feb 18, 2026