CVE-2022-27406

Published: 04/22/2022 14:15:09
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.
HIGH
CVSS v3: 7.5

Status

DocFilters Release Package State Justification Comment
25.1 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.4 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.4.0 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.3 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.2.1 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.2 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
24.1 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
23.3 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
23.2.1 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
23.2 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
23.1 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
22.4 freetype (2.6.5) Resolved Code Not Present Patched applied from https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
22.3 freetype (2.6.5) Resolved patched (upstream) https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
22.2 freetype (2.6.5) Resolved patched (upstream) https://gitlab.freedesktop.org/freetype/freetype/-/commit/0c2bdb01a2e1d24a3e592377a6d0822856e10df2
22.1 freetype (2.6.5) Needs Triage
21.11.1 freetype (2.6.5) Needs Triage
21.11 freetype (2.6.5) Needs Triage
21.8.1 freetype (2.6.5) Needs Triage
21.8 freetype (2.6.5) Needs Triage

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
7.5
Base Severity
HIGH
Confidentiality Impact
NONE
Integrity Impact
NONE
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
NONE
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version
3.1

References