View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-10244 severity moderate: SUSE including 14 source package names (beta1:libfreetype6-2.6.3-7.15.1, freetype2, …), 77 product×package rows across 44 product lines (Container caasp/v4/nginx-ingress-controller, Image SLES12-SP5-Azure-BYOS, … (44 product lines)): Fixed 71, Known Not Affected 6.
The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.