CVEs-PoC/2014/CVE-2014-2240.md

CVE-2014-2240

Description

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

POC

Reference

• http://www.freetype.org/index.html

Github

No PoCs found on GitHub currently.