JLSEC-2026-460 An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...

🗓️ 07 May 2026 14:50:29Reported by GoogleType

osv🔗 osv.dev👁 3 Views

FreeType 2.13.0 and earlier have out of bounds write parsing TrueType GX and variable font subglyphs, risking code execution.

Reporter	Title	Published	Views	Family All 272
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	28 May 202514:39	–	ibm
IBM Security Bulletins	Security Bulletin: FreeType Remote Code Execution Vulnerability affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	5 May 202521:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Automation is vulnerable to an arbitrary code execution (CVE-2025-27363).	30 Apr 202513:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FreeType affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Sep 202511:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Business Automation images repackage a vulnerable version of freetype - CVE-2025-27363	6 May 202508:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a FreeType Remote Code Execution security vulnerability (CVE-2025-27363)	7 May 202514:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: Several Security Vulnerabilities have been discovered in IBM Security Verify Directory Appliance	7 Oct 202518:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos PowerPlay has addressed a vulnerability in FreeType (CVE-2025-27363)	29 Apr 202516:06	–	ibm

Source	Link
openwall	www.openwall.com/lists/oss-security/2025/03/13/1
openwall	www.openwall.com/lists/oss-security/2025/03/13/11
openwall	www.openwall.com/lists/oss-security/2025/03/13/12
openwall	www.openwall.com/lists/oss-security/2025/03/13/2
openwall	www.openwall.com/lists/oss-security/2025/03/13/3
openwall	www.openwall.com/lists/oss-security/2025/03/13/8
openwall	www.openwall.com/lists/oss-security/2025/03/14/1
openwall	www.openwall.com/lists/oss-security/2025/03/14/2
openwall	www.openwall.com/lists/oss-security/2025/03/14/3
openwall	www.openwall.com/lists/oss-security/2025/03/14/4

07 May 2026 15:17Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.1

EPSS0.70761