Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeType2 PFB解析代码整数溢出漏洞
Vulnerability Description
FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在整数溢出漏洞。PFB文件包含一个Private字典表字段，用于描述如何创建字符。在解析这个数据结构时，有漏洞的代码段从文件读取了一系列16位长度值然后相加用于分配动态缓冲区。这个加法运算的结果可能会出现整数溢出，之后导致堆溢出。如果用户受骗通过使用了该库的应用程序打开了恶
CVSS Information
N/A
Vulnerability Type
N/A