CVE-2010-3855

N/A

Published: November 26, 2010 at 07:00 PM UTC

Updated: June 16, 2026 at 11:23 PM UTC

1 product affected across 1 vendorFreeType

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 5%

Description

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

FreeType · Freetype

95%

v ≤ 2.4.31.3.1 2.0.6 2.0.9 2.1 2.1.10 2.1.3 2.1.4 2.1.5 2.1.6 2.1.7 2.1.8 2.1.9 2.2.0 2.2.1 2.2.10 2.3.0 2.3.1 2.3.10 2.3.11 2.3.12 2.3.2 2.3.3 2.3.4 2.3.5 2.3.6 2.3.7 2.3.8 2.3.9 2.4.0 2.4.1 2.4.2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (30)

x_refsource_CONFIRM

Source: [email protected]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221

x_refsource_CONFIRM

Source: [email protected]

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a