Wind River Support Network

HomeDefectsLIN1021-5618

Fixed

LIN1021-5618 : Security Advisory - freetype - CVE-2023-2004

Created: Apr 16, 2023 Updated: May 27, 2023

Resolved Date: May 27, 2023

Found In Version: 10.21.20.1

Fix Version: 10.21.20.18

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

An integer overflow vulnerability was discovered in Freetype in tt_hvadvance_adjust() function in src/truetype/ttgxvar.c.

CREATE(Triage):(User=admin) CVE-2023-2004 (https://nvd.nist.gov/vuln/detail/CVE-2023-2004)

CVEs

CVE-2023-2004