VULNERABILITY INTELLIGENCE
CVE-2014-9675
CVSS score5 MEDIUM
EPSS probability4.16%
CISA KEVNot currently listed
Published2015-02-08
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit
- cve@mitre.org — Issue Tracking
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org
- cve@mitre.org — Third Party Advisory