CVE-2014-9675

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

• CWE-264

• http://advisories.mageia.org/MGASA-2015-0083.htmlThird Party Advisory
• http://code.google.com/p/google-security-research/issues/detail?id=151Exploit
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7Issue Tracking
• http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0696.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3188Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:055Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlThird Party Advisory
• http://www.securityfocus.com/bid/72986
• http://www.ubuntu.com/usn/USN-2510-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2739-1Third Party Advisory
• https://security.gentoo.org/glsa/201503-05
• https://source.android.com/security/bulletin/2016-11-01.html
• http://advisories.mageia.org/MGASA-2015-0083.htmlThird Party Advisory
• http://code.google.com/p/google-security-research/issues/detail?id=151Exploit
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7Issue Tracking
• http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-0696.htmlThird Party Advisory
• http://www.debian.org/security/2015/dsa-3188Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:055Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.htmlThird Party Advisory
• http://www.securityfocus.com/bid/72986
• http://www.ubuntu.com/usn/USN-2510-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2739-1Third Party Advisory
• https://security.gentoo.org/glsa/201503-05
• https://source.android.com/security/bulletin/2016-11-01.html

Published

Feb 8, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9669Multiple integer overflows in sfnt/ttcmap.c in FreeType befo…
• CVE-2014-9670Multiple integer signedness errors in the pcf_get_encodings …
• CVE-2014-9671Off-by-one error in the pcf_get_properties function in pcf/p…
• CVE-2014-9672Array index error in the parse_fond function in base/ftmac.c…
• CVE-2014-9673Integer signedness error in the Mac_Read_POST_Resource funct…
• CVE-2014-9674The Mac_Read_POST_Resource function in base/ftobjs.c in Free…
• CVE-2014-9676The seg_write_packet function in libavformat/segment.c in ff…
• CVE-2014-9677Cross-site scripting (XSS) vulnerability in FlexPaperViewer.…
• CVE-2014-9678FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote …
• CVE-2014-9679Integer underflow in the cupsRasterReadPixels function in fi…
• CVE-2014-9680sudo before 1.8.12 does not ensure that the TZ environment v…
• CVE-2014-9681Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…