Unrated severityNVD Advisory· Published Aug 19, 2010· Updated Jun 16, 2026
CVE-2010-2497
CVE-2010-2497
Description
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords2 versionspkg:rpm/opensuse/freetype2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ft2demos&distro=openSUSE%20Tumbleweed
< 2.7-1.1+ 1 more
- (no CPE)range: < 2.7-1.1
- (no CPE)range: < 2.7-1.1
Patches
Vulnerability mechanics
References
12- git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/nvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- savannah.nongnu.org/bugs/nvdExploitIssue TrackingThird Party Advisory
- savannah.nongnu.org/bugs/nvdExploitIssue TrackingThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.nongnu.org/archive/html/freetype/2010-07/msg00001.htmlnvdMailing ListRelease NotesThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- secunia.com/advisories/48951nvdThird Party Advisory
- www.debian.org/security/2010/dsa-2070nvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- support.apple.com/kb/HT4435nvdBroken Link
News mentions
0No linked articles in our index yet.