← Back

Tvos

tvos

Vendor: Apple • 2,005 CVEs

CVEs (2,005)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-2808
3Apple
CanonicalFreetype
5Freetype
Iphone OsMac Os X+2 more
Apr 29, 2026
Aug 19, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrar...Show more
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.Show less
CVE-2010-2807
3Apple
CanonicalFreetype
5Freetype
Iphone OsMac Os X+2 more
Apr 29, 2026
Aug 19, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2806
3Apple
CanonicalFreetype
5Freetype
Iphone OsMac Os X+2 more
Apr 29, 2026
Aug 19, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative siz...Show more
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.Show less
CVE-2010-2805
3Apple
CanonicalFreetype
5Freetype
Iphone OsMac Os X+2 more
Apr 29, 2026
Aug 19, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly...Show more
The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.Show less
CVE-2010-2249
8Apple
CanonicalDebian+5 more
12Debian Linux
FedoraIphone Os+9 more
Apr 29, 2026
Jun 30, 2010
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Sca...Show more
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks.Show less