CVE-2014-9659

Source
https://nvd.nist.gov/vuln/detail/CVE-2014-9659
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-9659.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2014-9659
Downstream
Related
Published
2015-02-08T11:59:21Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.

References

Affected packages