CoreCVE
Back

CRITICAL

freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c

Published Jul 30, 2019

Description

In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.

Affected products

Remediation

Red Hat statement

This issue affects the versions of freetype as shipped with Red Hat Enterprise Linux 5 and 6. This issue did not affect the versions of freetype as shipped with Red Hat Enterprise Linux 7 and 8. Red Hat Enterprise Linux 5 is now in Extended Life Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Metrics

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 30, 2019
Updated Aug 6, 2024
Reserved Jul 30, 2019
Link CVE-2015-9290
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2015-9290
Red Hat
Severity Low
Public date Jul 30, 2019
Links CVE-2015-9290 - Bugzilla