Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2012-1137

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

FreeType是一款使用C语言编写的开源字体渲染库。 FreeType 2.4.9之前版本存在缓冲区错误漏洞。远程攻击者可利用该漏洞借助BDF字体中的特制头导致拒绝服务（无效的堆读取操作和内存破坏）或者可能执行任意代码。

AI Predicted 9.8 Difficulty: Easy EPSS 3.81% · P89 Updated Feb 21, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-1137

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

FreeType 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-1137

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2012-1137

请登录查看更多情报信息。

Vendor Advisories for CVE-2012-1137 (16)

http://support.apple.com/kb/HT5503 x_refsource_CONFIRM
🔗 https://bugzilla.mozilla.org/show_bug.cgi?id=733512 x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=800595 x_refsource_CONFIRM
http://www.mozilla.org/security/announce/2012/mfsa2012-21.html x_refsource_CONFIRM
🔗 http://secunia.com/advisories/48797 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/48973 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/48822 third-party-advisory x_refsource_SECUNIA
🔗 http://www.securityfocus.com/bid/52318 vdb-entry x_refsource_BID
http://secunia.com/advisories/48951 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/48758 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/48508 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1026765 vdb-entry x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-1403-1 vendor-advisory x_refsource_UBUNTU
http://security.gentoo.org/glsa/glsa-201204-04.xml vendor-advisory x_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2012-0467.html vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2012:057 vendor-advisory x_refsource_MANDRIVA

Mailing List Discussions for CVE-2012-1137 (5)

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html vendor-advisory x_refsource_SUSE
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html vendor-advisory x_refsource_APPLE
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html vendor-advisory x_refsource_SUSE
http://www.openwall.com/lists/oss-security/2012/03/06/16 mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2012-1137

Same Patch Batch · n/a · 2012-04-25 · 39 CVEs total

CVE-2012-1135		FreeType缓冲区错误漏洞
CVE-2012-1126		Mozilla Firefox 缓冲区错误漏洞
CVE-2012-1127		Mozilla Firefox 缓冲区错误漏洞
CVE-2012-1128		FreeType缓冲区错误漏洞
CVE-2012-1129		FreeType缓冲区错误漏洞
CVE-2012-1130		Mozilla Firefox 缓冲区错误漏洞
CVE-2012-1131		Mozilla Firefox 缓冲区错误漏洞
CVE-2012-1132		Mozilla Firefox 缓冲区错误漏洞
CVE-2012-1133		FreeType缓冲区错误漏洞
CVE-2012-1134		FreeType 缓冲区错误漏洞
CVE-2012-0479		Mozilla Firefox/SeaMonkey/Thunderbird安全漏洞
CVE-2012-1136		FreeType 缓冲区错误漏洞
CVE-2012-1138		FreeType缓冲区错误漏洞
CVE-2012-1139		FreeType 缓冲区错误漏洞
CVE-2012-1140		FreeType 缓冲区错误漏洞
CVE-2012-1141		FreeType 缓冲区错误漏洞
CVE-2012-1142		FreeType 缓冲区错误漏洞
CVE-2012-1143		FreeType 数字错误漏洞
CVE-2012-1144		FreeType 缓冲区错误漏洞
CVE-2012-0469		Mozilla Firefox/Thunderbird/SeaMonkey释放后使用漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-1137

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2012-1137

Quick assessment

I. Basic Information for CVE-2012-1137

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-1137

III. Intelligence Information for CVE-2012-1137

Vendor Advisories for CVE-2012-1137 (16)

Mailing List Discussions for CVE-2012-1137 (5)

Same Patch Batch · n/a · 2012-04-25 · 39 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2012-1137

Leave a comment