Lucene search
+L

22 matches found

nessus
nessus
added 2026/01/31 12:0 a.m.5 views

EulerOS Virtualization 2.10.0 : freetype (EulerOS-SA-2026-1165)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting ...

8.1CVSS7.2AI score0.26049EPSS
Exploits1References2
nessus
nessus
added 2026/01/31 12:0 a.m.4 views

EulerOS Virtualization 2.10.1 : freetype (EulerOS-SA-2026-1114)

According to the versions of the freetype package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting ...

8.1CVSS7.2AI score0.26049EPSS
Exploits1References2
astralinux
astralinux
added 2026/01/27 5:1 a.m.6 views

Astra Linux – Vulnerability in Freetype

A out-of-bounds write exists in FreeType versions 2.13.0 and below earlier versions of FreeType are not vulnerable. This issue occurs when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned...

8.1CVSS7.2AI score0.26049EPSS
Exploits1References3
redhat
redhat
added 2025/06/23 11:15 a.m.6 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/05/29 6:42 a.m.5 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/05/28 8:3 a.m.9 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/05/27 3:16 p.m.5 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/05/27 9:32 a.m.6 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
osv
osv
added 2025/04/29 7:49 p.m.10 views

CLSA-2025-1745956171 freetype: Fix of CVE-2025-27363

CVE-2025-27363: fix out of bounds write in font subglyph structures parsing...

8.1CVSS7.1AI score0.26049EPSS
Exploits1References1
redhat
redhat
added 2025/03/31 2:4 a.m.7 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/03/31 1:52 a.m.7 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/03/31 1:49 a.m.11 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
redhat
redhat
added 2025/03/31 1:45 a.m.5 views

freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files

A flaw was found in FreeType. In affected versions, an out-of-bounds write condition may be triggered when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value...

8.1CVSS7.7AI score0.26049EPSS
Exploits1References6
osv
osv
added 2025/03/25 6:13 p.m.8 views

CLSA-2025-1742926404 freetype: Fix of CVE-2025-27363

CVE-2025-27363: fix OOB write when parsing font subglyph structures...

8.1CVSS7.1AI score0.26049EPSS
Exploits1References1
suse
suse
added 2025/03/25 2:8 a.m.5 views

Security update for freetype2

This update for freetype2 fixes the following issues: CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files bsc1239465. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

9.2CVSS7.2AI score0.26049EPSS
Exploits1References4
osv
osv
added 2025/03/21 1:17 p.m.2 views

OESA-2025-1300 freetype security update

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output glyph images of most vector and bitmap font formats Security Fixes: An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of...

8.1CVSS8AI score0.26049EPSS
Exploits1References2
suse
suse
added 2025/03/19 6:34 p.m.5 views

Security update for freetype2

This update for freetype2 fixes the following issues: CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files bsc1239465. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

9.2CVSS7.4AI score0.26049EPSS
Exploits1References4
osv
osv
added 2025/03/17 11:40 a.m.5 views

USN-7352-1 freetype vulnerability

It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker could use this issue to cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code...

8.1CVSS7AI score0.26049EPSS
Exploits1References2
mscve
mscve
added 2025/03/15 7:0 a.m.3 views

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.

...

8.1CVSS7.4AI score0.26049EPSS
Exploits1
osv
osv
added 2025/03/11 2:15 p.m.3 views

ALPINE-CVE-2025-27363

An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a...

8.1CVSS8AI score0.26049EPSS
Exploits1References1
Rows per page
Query Builder