CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2025-273638.1/HIGHEPSS 27.8%CISA KEV
2025-03-11

FreeType Heap Out-of-Bounds Write Vulnerability (CVE-2025-27363) Security Advisory

[Affected Scope] FreeType versions 2.13.0 and below

[Impact] Heap buffer overflow during TrueType GX and variable font parsing, potentially leading to arbitrary code execution (RCE) with active in-the-wild exploitation detected

[Mitigation] Immediately upgrade FreeType to a non-vulnerable version (2.13.1 or newer)

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse