CVE-2014-9665: Buffer Overflow
The LoadSBitPng function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9665?
CVE-2014-9665 has a severity rating that indicates it could result in a denial of service due to integer overflow and heap-based buffer overflow vulnerabilities.
Which software versions are affected by CVE-2014-9665?
CVE-2014-9665 affects FreeType versions prior to 2.5.4 and several versions of Fedora, Ubuntu, and openSUSE operating systems.
How do I fix CVE-2014-9665?
To fix CVE-2014-9665, you should upgrade your FreeType installation to version 2.5.4 or later.
What types of attacks could exploit CVE-2014-9665?
CVE-2014-9665 could be exploited to launch remote denial-of-service attacks through specially crafted PNG files.
Is there a workaround for CVE-2014-9665?
While the best practice is to upgrade to a safe version, users can limit exposure by disabling PNG processing where possible.