VULNERABILITY INTELLIGENCE
CVE-2008-1807
CVSS score7.5 HIGH
EPSS probability3.58%
CISA KEVNot currently listed
Published2008-06-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.