CVE-2025-27363 FreeType FreeType
FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.
- CVSS
- not scored
On CISA’s exploited list
FreeType Out-of-Bounds Write Vulnerability
- Added
- 2025-05-06
- Federal patch deadline
- 2025-05-27
- Ransomware use
- not known