CVE-2015-9381

CVE-2015-9381 describes a heap-based buffer over-read vulnerability in FreeType before version 2.6.1, specifically within the T1_Get_Private_Dict function in type1/t1parse.c, affecting various Debian and FreeType installations. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network attack vector, low attack complexity, and potential for high impact on confidentiality, integrity, and availability if exploited. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in common repositories like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this CVE.