CVE-2018-6942

MEDIUM6.5EPSS 0.20%

Published: 2/13/2018Modified: 4/28/2026

Also known as:ALPINE-CVE-2018-6942DEBIAN-CVE-2018-6942

Description

An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.

Affected packages (2)

Alpine/freetypefrom 0, < 2.9-r1
Debian/freetypefrom 0, < 2.9.1-3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-6942
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-6942