CVE-2012-4190

CVE-2012-4190 describes a critical memory corruption vulnerability in the FreeType library, specifically within the FT2FontEntry::CreateFontEntry function, affecting Mozilla Firefox versions prior to 16.0.1 when running on CyanogenMod 10. This flaw allows remote attackers to trigger a denial of service through an application crash or potentially achieve arbitrary code execution. With a CVSS score of 10.0, it represents a highly severe threat due to its network-based attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.