CVE catalog

CVE-2016-10244

freetype: CVE-2016-10244

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
3.37% · Oct 22, 2026

The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreetypesid2.14.3+dfsg-3fixed
Debianfreetypeforky2.14.3+dfsg-3fixed
Debianfreetypetrixie2.13.3+dfsg-1+deb13u1fixed
Debianfreetypetrixie-security2.13.3+dfsg-1+deb13u1fixed
Debianfreetypebookworm2.12.1+dfsg-5+deb12u4fixed
Debianfreetypebookworm-security2.12.1+dfsg-5+deb12u4fixed
Alpinefreetype3.22.5.5-r1fixed
Alpinefreetype3.32.6.3-r0fixed
Alpinefreetype3.42.6.3-r1fixed
Ubuntufreetype14.042.4.12-0ubuntu1vulnerable
Ubuntufreetype14.042.5.0.1-0ubuntu2vulnerable
Ubuntufreetype14.042.5.1-1ubuntu1vulnerable
Ubuntufreetype14.042.5.1-1ubuntu2vulnerable
Ubuntufreetype14.042.5.1-2ubuntu1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.2vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.3vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.4vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.5vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.6fixed
Ubuntufreetype16.042.5.2-4ubuntu2vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu1vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu2vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu2.1fixed
Ubuntufreetype14.042.4.12-0ubuntu1vulnerable
Ubuntufreetype14.042.5.0.1-0ubuntu2vulnerable
Ubuntufreetype14.042.5.1-1ubuntu1vulnerable
Ubuntufreetype14.042.5.1-1ubuntu2vulnerable
Ubuntufreetype14.042.5.1-2ubuntu1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.1vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.2vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.3vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.4vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.5vulnerable
Ubuntufreetype14.042.5.2-1ubuntu2.6fixed
Ubuntufreetype16.042.5.2-4ubuntu2vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu1vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu2vulnerable
Ubuntufreetype16.042.6.1-0.1ubuntu2.1fixed
Susefreetype2linux enterprise desktop 12 sp22.6.3-7.15.1fixed
Suseft2demoslinux enterprise desktop 12 sp22.6.3-7.15.1fixed
Susefreetype2linux enterprise desktop 12 sp32.6.3-7.15.1fixed
Suseft2demoslinux enterprise desktop 12 sp32.6.3-7.15.1fixed
Susefreetype2linux enterprise server for raspberry pi 12 sp22.6.3-7.15.1fixed
Suseft2demoslinux enterprise server for raspberry pi 12 sp22.6.3-7.15.1fixed
Susefreetype2linux enterprise software development kit 12 sp22.6.3-7.15.1fixed
Susefreetype2linux enterprise software development kit 12 sp32.6.3-7.15.1fixed
Susefreetype2linux enterprise server 12 sp22.6.3-7.15.1fixed
Suseft2demoslinux enterprise server 12 sp22.6.3-7.15.1fixed
Susefreetype2linux enterprise server for sap applications 12 sp22.6.3-7.15.1fixed
Suseft2demoslinux enterprise server for sap applications 12 sp22.6.3-7.15.1fixed
Susefreetype2linux enterprise server 12 sp32.6.3-7.15.1fixed
Suseft2demoslinux enterprise server 12 sp32.6.3-7.15.1fixed
Susefreetype2linux enterprise server for sap applications 12 sp32.6.3-7.15.1fixed
Suseft2demoslinux enterprise server for sap applications 12 sp32.6.3-7.15.1fixed
Susefreetype2linux enterprise software development kit 11 sp42.3.7-25.45.5.1fixed
Susefreetype2linux enterprise server 11 sp42.3.7-25.45.5.1fixed
Suseft2demoslinux enterprise server 11 sp42.3.7-25.45.5.1fixed
Susefreetype2linux enterprise server for sap applications 11 sp42.3.7-25.45.5.1fixed
Suseft2demoslinux enterprise server for sap applications 11 sp42.3.7-25.45.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreetypesourcesid2.6.3-3.1not yet assignedNot reported[856971]
Debianfreetypesourceforky2.6.3-3.1not yet assignedNot reported[856971]
Debianfreetypesourcetrixie2.6.3-3.1not yet assignedNot reported[856971]
Debianfreetypesourcebookworm2.6.3-3.1not yet assignedNot reported[856971]
Alpinefreetypeapk3.22.5.5-r1Not reportedALPINE-CVE-2016-10244Not reported
Alpinefreetypeapk3.32.6.3-r0Not reportedALPINE-CVE-2016-10244Not reported
Alpinefreetypeapk3.42.6.3-r1Not reportedALPINE-CVE-2016-10244Not reported
Ubuntufreetypedeb14.042.5.2-1ubuntu2.6Not reportedUBUNTU-CVE-2016-10244Not reported
Ubuntufreetypedeb16.042.6.1-0.1ubuntu2.1Not reportedUBUNTU-CVE-2016-10244Not reported
Ubuntufreetypedeb14.042.5.2-1ubuntu2.6Not reportedUSN-3237-1Not reported
Ubuntufreetypedeb16.042.6.1-0.1ubuntu2.1Not reportedUSN-3237-1Not reported
Susefreetype2rpmlinux enterprise desktop 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise desktop 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise desktop 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise desktop 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise server for raspberry pi 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise server for raspberry pi 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise software development kit 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise software development kit 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise server 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise server 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise server for sap applications 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise server for sap applications 12 sp22.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise server 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise server 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise server for sap applications 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Suseft2demosrpmlinux enterprise server for sap applications 12 sp32.6.3-7.15.1Not reportedSUSE-SU-2018:0414-1Not reported
Susefreetype2rpmlinux enterprise software development kit 11 sp42.3.7-25.45.5.1Not reportedSUSE-SU-2018:0462-1Not reported
Susefreetype2rpmlinux enterprise server 11 sp42.3.7-25.45.5.1Not reportedSUSE-SU-2018:0462-1Not reported
Suseft2demosrpmlinux enterprise server 11 sp42.3.7-25.45.5.1Not reportedSUSE-SU-2018:0462-1Not reported
Susefreetype2rpmlinux enterprise server for sap applications 11 sp42.3.7-25.45.5.1Not reportedSUSE-SU-2018:0462-1Not reported
Suseft2demosrpmlinux enterprise server for sap applications 11 sp42.3.7-25.45.5.1Not reportedSUSE-SU-2018:0462-1Not reported

[Debian bug #856971]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [freetype2-demos]Unknown

    Source package: [freetype]

    Details (4)

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

  • [freetype2-doc]Unknown

    Source package: [freetype]

    Details (4)

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

  • [libfreetype6]Unknown

    Source package: [freetype]

    Details (4)

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

  • [libfreetype6-dev]Unknown

    Source package: [freetype]

    Details (4)

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

  • [libfreetype-dev]Unknown

    Source package: [freetype]

    Details (4)

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · bookworm; dsa · freetype · debian · 12

[Debian 13 (Trixie)]

  • [freetype2-demos]Unknown

    Source package: [freetype]

    Details (4)

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

  • [freetype2-doc]Unknown

    Source package: [freetype]

    Details (4)

    • 2.13.3+dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · all · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

  • [libfreetype6]Unknown

    Source package: [freetype]

    Details (4)

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

  • [libfreetype-dev]Unknown

    Source package: [freetype]

    Details (4)

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

    • 2.13.3+dfsg-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 2.6.3-3.1

      dsa · freetype · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]