| Package | Affected versions | Patched versions |
|---|---|---|
| freetype | ≥ 2.7, < 2.8 | 2.8 |
FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free