CVE-2015-9382

Description

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.798

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2019:4254) freetype security update freetype-2.3.11-19.el6_10.i686.rpm	Linux
(RHSA-2019:4254) freetype security update freetype-2.3.11-19.el6_10.x86_64.rpm	Linux
(RHSA-2019:4254) freetype security update freetype-demos-2.3.11-19.el6_10.i686.rpm	Linux
(RHSA-2019:4254) freetype security update freetype-demos-2.3.11-19.el6_10.x86_64.rpm	Linux
(RHSA-2019:4254) freetype security update freetype-devel-2.3.11-19.el6_10.i686.rpm	Linux
(RHSA-2019:4254) freetype security update freetype-devel-2.3.11-19.el6_10.x86_64.rpm	Linux
(CESA-2019:4254) freetype security update freetype-2.3.11-19.el6_10.i686.rpm	Linux
(CESA-2019:4254) freetype security update freetype-2.3.11-19.el6_10.x86_64.rpm	Linux
(CESA-2019:4254) freetype security update freetype-demos-2.3.11-19.el6_10.i686.rpm	Linux
(CESA-2019:4254) freetype security update freetype-demos-2.3.11-19.el6_10.x86_64.rpm	Linux
(CESA-2019:4254) freetype security update freetype-devel-2.3.11-19.el6_10.i686.rpm	Linux
(CESA-2019:4254) freetype security update freetype-devel-2.3.11-19.el6_10.x86_64.rpm	Linux
Out-of-bounds Read Vulnerability (CVE-2015-9382)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234