Wind River Support Network

HomeDefectsLIN7-11375

Fixed

LIN7-11375 : Security Advisory - freetype - CVE-2015-9382

Created: Sep 4, 2019 Updated: Oct 18, 2019

Resolved Date: Oct 18, 2019

Found In Version: 7.0.0.1

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

CREATE(Triage):(User=admin) [CVE-2015-9382|https://nvd.nist.gov/vuln/detail/CVE-2015-9382]

CVEs

CVE-2015-9382