CVE-2017-7858: Critical severity FreeType vulnerability
Published Apr 14, 2017
·Updated
FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TTGetMMVar function in truetype/ttgxvar.c and the sfntinitface function in sfnt/sfobjs.c.
Affected Software
1 affected component
FreeType<=2.7.1
Remediation
Event History
Apr 14, 2017
CVE Published
via MITRE·04:30 AM
Data Sourced
via MITRE·04:30 AM
Description
Data Sourced
via NVD·04:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-7858?
CVE-2017-7858 is classified as a high severity vulnerability due to its potential for leading to arbitrary code execution.
2
How do I fix CVE-2017-7858?
To fix CVE-2017-7858, update FreeType to version 2.7.2 or later.
3
What software is affected by CVE-2017-7858?
CVE-2017-7858 affects FreeType versions prior to 2.7.2.
4
What type of vulnerability is CVE-2017-7858?
CVE-2017-7858 is an out-of-bounds write vulnerability related to the TT_Get_MM_Var function.
5
What impact does CVE-2017-7858 have on systems?
CVE-2017-7858 can allow attackers to execute arbitrary code, potentially compromising the affected system.