Loading
The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.
Use CWE-119, Freetype vendor hub and Freetype product page to widen CVE-2012-5669 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2020-15999, CVE-2025-27363 and CVE-2022-27404 for nearby disclosures in the same product family.