CVE-2007-2754: FreeType

Medium severity, CVSS 6.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.

Affected products

• FreeType FreeType: up to and including 2.3.4

Published 2007-05-17. Last modified 2026-06-16.