View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2015-9290 severity low: SUSE including 4 source package names (freetype2, freetype2-devel, libfreetype6, libfreetype6-32bit), 100 product×package rows across 39 product lines (SUSE CaaS Platform 3.0, SUSE CaaS Platform 4.5, … (39 product lines)): Known Not Affected 100.
In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.