UnratedFix available
freetype, libxfont — security advisory
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
- Products
- freetype, libxfont
- Affected versions
- Not specified
- Fixed versions
- 1:1.2.2-2, 2.3.5-1
- CVEs
- CVE-2007-1351
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 15:45 UTC · Revision 1
Source evidence
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
osv:DEBIAN-CVE-2007-1351
freetype
Fixed versions: 2.3.5-1
freetype
Fixed versions: 2.3.5-1
freetype
Fixed versions: 2.3.5-1
libxfont
Fixed versions: 1:1.2.2-2
libxfont
Fixed versions: 1:1.2.2-2
libxfont
Fixed versions: 1:1.2.2-2
Complete source record
{
"id": "c7ca934d872dc55015fd4ec0aa7386b2210e36cb39b66847e6b4c945ddcac800",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2007-1351",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2007-1351",
"summary": "Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.",
"evidence": "osv:DEBIAN-CVE-2007-1351",
"products": [
{
"name": {
"value": "freetype",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.3.5-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "freetype",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.3.5-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "freetype",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.3.5-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxfont",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.2.2-2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxfont",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.2.2-2",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libxfont",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:1.2.2-2",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2007-1351",
"aliases": [
"DEBIAN-CVE-2007-1351"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.3.5-1"
}
]
}
],
"package": {
"name": "freetype",
"purl": "pkg:deb/debian/freetype?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.3.5-1"
}
]
}
],
"package": {
"name": "freetype",
"purl": "pkg:deb/debian/freetype?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.3.5-1"
}
]
}
],
"package": {
"name": "freetype",
"purl": "pkg:deb/debian/freetype?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.2.2-2"
}
]
}
],
"package": {
"name": "libxfont",
"purl": "pkg:deb/debian/libxfont?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.2.2-2"
}
]
}
],
"package": {
"name": "libxfont",
"purl": "pkg:deb/debian/libxfont?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.2.2-2"
}
]
}
],
"package": {
"name": "libxfont",
"purl": "pkg:deb/debian/libxfont?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-1351.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
}
],
"modified": "2026-10-21T17:47:35.247179227Z",
"provider": "osv",
"upstream": [
"CVE-2007-1351"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2007-1351"
]
},
"related_cves": [
{
"value": "CVE-2007-1351",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 398325,
"published_at": "2007-04-06T01:19:00+00:00"
}