Launchpad.net

CVE 2015-9383

FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.

See the CVE page on Mitre.org for more details.