CVE-2016-5384
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary c…
Published: 2016-08-12 · CVSS: Unscored
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7