CVE-2014-9668

CVE-2014-9668 describes an integer overflow and heap-based buffer overflow vulnerability in the FreeType library, specifically within the woff_open_font function. This flaw, affecting products like FreeType, Fedora, and openSUSE, allows remote attackers to cause a denial of service or potentially other impacts through a crafted Web Open Font Format (WOFF) file. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and having low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.