Vulnerabilities in FreeType

3 results

CVE-2025-27363HIGHAn out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parseEPSS 23.4%KEV CVE-2025-23022MEDIUMFreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.EPSS 0.2%CVE-2026-23865MEDIUMAn integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an EPSS 0.1%