CVE-2012-5670
EPSS 3.0%
Description
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.
How to fix CVE-2012-5670
To remediate CVE-2012-5670, upgrade the affected package to a fixed version below.
- Debian/freetype—upgrade to 2.4.9-1.1 or later
Is CVE-2012-5670 being exploited?
Low — EPSS is 3.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.4.9-1.1