What’s Vulnerable › Vulnerabilities

CVE-2014-9745

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-09-14 · updated 2026-06-17
• Weakness: CWE-399

Description

The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.

Affected products

• Canonical Ubuntu Linux: 12.04, 14.04, 15.04
• Debian Linux: 7.0, 8.0
• FreeType: through 2.5.2
• Opensuse: 13.1

References

• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00017.html
• http://savannah.nongnu.org/bugs/index.php?41590
• http://www.debian.org/security/2015/dsa-3370
• http://www.securityfocus.com/bid/76727
• http://www.securitytracker.com/id/1033536
• http://www.ubuntu.com/usn/USN-2739-1
• https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124
• https://code.google.com/p/chromium/issues/detail?id=459050
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00017.html
• http://savannah.nongnu.org/bugs/index.php?41590

Get alerted when CVE-2014-9745 or the next vulnerability affects your stack