CyberRota Analysis
AI-GeneratedAn out-of-bounds read vulnerability in FreeType versions up to 2.14.3 can lead to potential information disclosure when processing TrueType fonts. This flaw affects the TT_Get_Var_Design function, which may expose sensitive data to attackers. Organizations using FreeType for font rendering should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates