| Package | Affected versions | Patched versions |
|---|---|---|
| fontconfig | = 2.17.0 |
fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free