Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeType2 PFB解析代码内存破坏漏洞
Vulnerability Description
FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在内存破坏漏洞。如果用户所提供的PFB文件中包含有无效的number of axes的话，就会导致在非动态分配的内存区域调用free()函数，这可能触发内存破坏。 如果用户受骗通过使用了该库的应用程序打开了恶意的字体文件的话，就会触发这个漏洞，导致以应用程序的权限执行任意指
CVSS Information
N/A
Vulnerability Type
N/A