USN-2510-1
- Source
- https://ubuntu.com/security/notices/USN-2510-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2510-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-2510-1
- Upstream
- Related
- Published
- 2015-02-24T19:33:21.659909Z
- Modified
- 2025-10-13T04:34:06Z
- Summary
- freetype vulnerabilities
- Details
-
Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
- References
-
- https://ubuntu.com/security/notices/USN-2510-1
- https://ubuntu.com/security/CVE-2014-9656
- https://ubuntu.com/security/CVE-2014-9657
- https://ubuntu.com/security/CVE-2014-9658
- https://ubuntu.com/security/CVE-2014-9659
- https://ubuntu.com/security/CVE-2014-9660
- https://ubuntu.com/security/CVE-2014-9661
- https://ubuntu.com/security/CVE-2014-9662
- https://ubuntu.com/security/CVE-2014-9663
- https://ubuntu.com/security/CVE-2014-9664
- https://ubuntu.com/security/CVE-2014-9665
- https://ubuntu.com/security/CVE-2014-9666
- https://ubuntu.com/security/CVE-2014-9667
- https://ubuntu.com/security/CVE-2014-9668
- https://ubuntu.com/security/CVE-2014-9669
- https://ubuntu.com/security/CVE-2014-9670
- https://ubuntu.com/security/CVE-2014-9671
- https://ubuntu.com/security/CVE-2014-9672
- https://ubuntu.com/security/CVE-2014-9673
- https://ubuntu.com/security/CVE-2014-9674
- https://ubuntu.com/security/CVE-2014-9675
Affected packages
Ubuntu:14.04:LTS / freetype
Package
- Name
- freetype
- Purl
- pkg:deb/ubuntu/freetype@2.5.2-1ubuntu2.4?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.5.2-1ubuntu2.4
Affected versions
2.*
2.4.12-0ubuntu1
2.5.0.1-0ubuntu2
2.5.1-1ubuntu1
2.5.1-1ubuntu2
2.5.1-2ubuntu1
2.5.2-1ubuntu1
2.5.2-1ubuntu2
2.5.2-1ubuntu2.1
2.5.2-1ubuntu2.2
2.5.2-1ubuntu2.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "freetype2-demos",
"binary_version": "2.5.2-1ubuntu2.4"
},
{
"binary_name": "libfreetype6",
"binary_version": "2.5.2-1ubuntu2.4"
},
{
"binary_name": "libfreetype6-dev",
"binary_version": "2.5.2-1ubuntu2.4"
}
]
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:14.04:LTS",
"cves": [
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9656"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9657"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9658"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9659"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9660"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9661"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9662"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9663"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9664"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9665"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9666"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9667"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9668"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9669"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9670"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9671"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9672"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9673"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9674"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2014-9675"
}
]
}