CVE-2010-2806

CVE-2010-2806 describes an array index error in FreeType's t42_parse_sfnts function, affecting Apple, Canonical, and FreeType products. This vulnerability allows remote attackers to trigger a denial of service or potentially execute arbitrary code through specially crafted FontType42 font files, leading to a heap-based buffer overflow. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.