Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
Affected Platforms
Apple SafariCanonical Ubuntu LinuxFreetype FreetypeApple Mac Os XDebian Debian LinuxApple Iphone OsOpensuse OpensuseApple Mac Os X ServerSuse Linux Enterprise Server