High 1 exploited CVE ELSA-2025-3395 1 CVE

Important: freetype security update (Oracle Linux 7)

Published Apr 11, 2025 · Updated Apr 11, 2025

Ecosystem: Oracle Linux

Summary

[2.8-14.0.1.el7_9.1]
- Fix CVE-2025-27363 Out-of-bounds Write [Orabug: 37770275][CVE-2025-27363]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	freetype	0:2.8-14.0.1.el7_9.1
Oracle Linux · 7	freetype-demos	0:2.8-14.0.1.el7_9.1
Oracle Linux · 7	freetype-devel	0:2.8-14.0.1.el7_9.1

Vulnerabilities 1

High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025