CVE-2008-1807: FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number o...

Security readout for executives and security teams

This is an old FreeType2 font-parsing vulnerability. A malicious Printer Font Binary file could corrupt memory when opened or rendered by software using vulnerable FreeType2, potentially letting an attacker run code in that program's context. Exposure is most likely where FreeType2 before 2.3.6 is present and processes untrusted PFB font files. Any operating system, application, appliance, or bundled product shipping that library could be affected; the bundle includes Fedora, Gentoo, Mandriva, VMware, and Apple-related references. Prioritize remediation on systems that parse user-supplied fonts or documents. The vulnerability is old, but arbitrary code execution in a shared library can create broad exposure when vulnerable copies remain embedded in products. Mitigation focus: Upgrade FreeType2 to 2.3.6 or a vendor-supported fixed package.; Apply relevant OS or product vendor advisories for bundled FreeType2 copies.; Limit processing of untrusted PFB font files where feasible..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.