ft2demos (SUSE:Linux Enterprise Server 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 11 SP4 package ft2demos, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2016-10328 — CVSS 9.8 (critical): FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in…
• CVE-2017-8105 — CVSS 9.8 (critical): FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings…
• CVE-2017-8287 — CVSS 9.8 (critical): FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour…
• CVE-2016-10244 — CVSS 7.8 (high): The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows…
• CVE-2014-9747 — CVSS 7.5 (high): The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for…
• CVE-2014-9745 — CVSS 5.0 (medium): The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop)…