VULNERABILITY INTELLIGENCE

CVE-2011-3256

CVSS score4.3 MEDIUM

EPSS probability4.14%

CISA KEVNot currently listed

Published2011-10-14

Last modified2026-06-16

Description

FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.