Description
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeType | FreeType | 2.8.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | ft2demos +1 | 2.6.3-7.24.1 | SUSE-SU-2025:1528-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | freetype +2 | 2.8-14.amzn2.1.4 | ALAS2-2025-2806 |
Advisories 3
- SUSE-SU-2025:1528-1 Security update for freetype2 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-0048 FreeType: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 11, 2025
- ALAS2-2025-2806 Important: freetype security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 1, 2025