Buffer Over-read Vulnerability in FreeType's skip_comment Function

CVE-2015-9382 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

Learn more about our Web Application Penetration Testing UK.