Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2018-6942

An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.

  • Published: Feb 13, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-6942
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
freetype / freetype - 2.9.x
canonical / ubuntu_linux 17.10 17.10.x