CVE-2014-9675 in Google Android
Summary
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
Reservation
02/07/2015
Disclosure
02/08/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93489 | Google Android Freetype access control | 264 | Not defined | Official fix | CVE-2014-9675 |
| 69087 | FreeType access control | 264 | Unproven | Official fix | CVE-2014-9675 |