Groups > linux.debian.bugs.dist > #1148898

Bug#1034612: freetype: CVE-2023-2004

From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#1034612: freetype: CVE-2023-2004
Date	2023-06-06 22:40 +0200
Message-ID	<GDLDb-e7W5-1@gated-at.bofh.it> (permalink)
References	<GmlF7-38BV-3@gated-at.bofh.it> <GmlF7-38BV-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Control: retitle -1  src/truetype/ttgxvar.c (tt_hvadvance_adjust): Integer overflow.  
Control: tags -1 - security

On Wed, Apr 19, 2023 at 09:20:48PM +0200, Salvatore Bonaccorso wrote:
> Source: freetype
> Version: 2.12.1+dfsg-4
> Severity: important
> Tags: security upstream
> X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
> 
> Hi,
> 
> The following vulnerability was published for freetype.
> 
> CVE-2023-2004[0]:
> | An integer overflow vulnerability was discovered in Freetype in
> | tt_hvadvance_adjust() function in src/truetype/ttgxvar.c.

The CVE got rejected by the assigning CNA as further investigation
showed that there is no security issue.

Regards,
Salvatore

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#1034612: freetype: CVE-2023-2004 Salvatore Bonaccorso <carnil@debian.org> - 2023-04-19 21:30 +0200
  Bug#1034612: freetype: CVE-2023-2004 Salvatore Bonaccorso <carnil@debian.org> - 2023-06-06 22:40 +0200

csiph-web