High 1 exploited CVE ELSA-2025-3421 1 CVE

Important: freetype security update (Oracle Linux 8)

Published Mar 31, 2025 · Updated Mar 31, 2025

Ecosystem: Oracle Linux

Summary

[2.9.1-10]
- Fix CVE-2025-27363 Out-of-bounds Write
- Resolves: RHEL-83094

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	freetype	0:2.9.1-10.el8_10
Oracle Linux · 8	freetype-devel	0:2.9.1-10.el8_10

Vulnerabilities 1

High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025