CVE-2015-9290: FreeType

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.

Affected products

• FreeType FreeType: before 2.6.1 (fixed in 2.6.1)

Published 2019-07-30. Last modified 2026-06-17.