Scheduled maintenance: Some features related to account registration and licensing may be temporarily unavailable from Friday (May 8) at 1 PM to Sunday (May 10) at 5 PM (PST).

Wind River Support Network

HomeDefectsLIN9-4109
Fixed

LIN9-4109 : Security Advisory - freetype - CVE-2017-7858

Created: Apr 26, 2017    Updated: May 29, 2018
Resolved Date: Aug 10, 2017
Found In Version: 9.0.0.5
Fix Version: 9.0.0.7
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.

https://nvd.nist.gov/vuln/detail/CVE-2017-7858

Other Downloads

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube