Known vulnerabilities in freetype (Alpine package)

Vendor: Alpine Linux Development Team
Software: freetype (Alpine package)
Software CPE: cpe:2.3:o:alpine:freetype_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting freetype (Alpine package) freetype (Alpine package) is affected by 13 known vulnerabilities: 1 critical, 4 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999		 CWE-122 Critical
Available
Exploited
 2.10.4-r0 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more
#VU12561 - NULL Pointer Dereference
CVE-2018-6942		 CWE-476 Low
No
No
 2.7-r2 10.05.2018 SB2018021421
SB2018051014
SB2020052402
and 3 more
#VU11095 - Heap-based Buffer Overflow
CVE-2017-8287		 CWE-122 High
No
No
 2.5.5-r1 15.03.2018 SB2017051611
SB2017050922
SB2017051021
and 8 more
#VU11094 - Heap-based Buffer Overflow
CVE-2017-8105		 CWE-122 High
No
No
 2.5.5-r1 15.03.2018 SB2017051611
SB2017050922
SB2017051021
and 7 more
#VU11093 - Memory corruption
CVE-2016-10244		 CWE-119 Low
No
No
 2.5.5-r1 15.03.2018 SB2017032007
SB2017042903
SB2017061533
and 3 more
#VU32336 - Heap-based Buffer Overflow
CVE-2014-9674		 CWE-122 Medium
No
No
 2.5.4-r0 08.02.2015 SB2015020802
SB2016021905
#VU32564 - Improper input validation
CVE-2014-2241		 CWE-20 Medium
No
No
 2.5.0.1-r2 18.03.2014 SB2014031804
SB2014031324
#VU32478 - Stack-based buffer overflow
CVE-2014-2240		 CWE-121 Medium
No
No
 2.5.0.1-r2 12.03.2014 SB2014031201
SB2014031316
SB2014031317
and 5 more
#VU32696 - NULL Pointer Dereference
CVE-2012-5668		 CWE-476 Medium
No
No
 2.4.11-r0 24.01.2013 SB2013012401
SB2013041207
SB2014021106
and 1 more
#VU32698 - Memory corruption
CVE-2012-5669		 CWE-119 Medium
No
No
 2.4.11-r0 24.01.2013 SB2013012402
SB2013041208
SB2013020304
and 2 more
#VU32807 - Memory corruption
CVE-2012-1126		 CWE-119 High
No
No
 2.4.9-r0 25.04.2012 SB2012042501
SB2012051408
#VU33699 - Memory corruption
CVE-2011-3439		 CWE-119 High
No
No
 2.4.8-r0 11.11.2011 SB2011112201
SB2011120806
SB2011120807
and 1 more
#VU32846 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-3256		 CWE-94 Medium
No
No
 2.4.7-r0 14.10.2011 SB2011101401
SB2011111805
SB2011120806
and 2 more