Package · Azure Linux

freetype

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

Medium 5.5

CVE-2026-95512

Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeate…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Oct 2, 2026
Medium 5.3

CVE-2026-23865

An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…

FreeType FreeType openjdk-8 openjdk-lts Debian Ubuntu Azure Linux Alpine Wolfi

Mar 2, 2026
High 8.1

CVE-2025-27363 Exploited Public exploit EPSS 28%

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) whe…

FreeType FreeType freetype freetype Debian Ubuntu Azure Linux Alpine

Mar 11, 2025
KEV May 6, 2025
Unscored —

CVE-2022-27405

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype freetype Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27406

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the fun…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Unscored —

CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the funct…

qt5-qtwebengine freetype freetype qt5-qtbase Debian Ubuntu Azure Linux Alpine

Apr 22, 2022
Critical 9.6

CVE-2020-15999 Exploited Public exploit EPSS 64%

Heap buffer overflow in CefSharp

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium-browser firefox-esr Browsers Debian Ubuntu Azure Linux Alpine NuGet

Nov 3, 2020
KEV Nov 3, 2021