FFreeType

Products

Exploited and recent CVEs

• CVE-2025-27363 High 8.1 Exploited An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variabl 27.8%
• CVE-2026-23865 Medium 5.3 An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tab 0.2%
• CVE-2025-23022 Medium 4.0 FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. 0.2%