PT-2023-17404 · Freetype+3 · Freetype+3

Published 2023-04-14 · Updated 2023-08-28 · CVE-2023-2004

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Freetype (affected versions not specified)

Description An integer overflow issue was discovered in the tt hvadvance adjust() function in src/truetype/ttgxvar.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2023-2004

MGASA-2023-0182

OESA-2023-1246

OPENSUSE-SU-2023_3461-1

SUSE-SU-2023:3461-1

SUSE-SU-2023_3461-1

USN-6062-1

Affected Products

Freetype

Linuxmint

Suse

Ubuntu

References · 32

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2004 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-2004 · Security Note
• https://ubuntu.com/security/notices/USN-6062-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KDNGTGQAUZJ6YQDI2AVGYIFFPUMMZLKS · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1246 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3461-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2004 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6062-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0182 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-2004 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0182.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2004 · Security Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://t.me/cvenotify/49158 · Telegram Post