Approved changes feed: RSS · Atom
cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Freetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1) |
|---|---|
| Product | Freetype (e391fb37-5a9a-519e-808f-1334610140ce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/freetype/freetype |
purl2cpe | 2026-06-01 10:11:50.971435 |
pkg:gnu/freetype |
purl2cpe | 2026-06-01 10:11:50.971436 |
pkg:rpm/fedora/freetype |
purl2cpe | 2026-06-01 10:11:50.971438 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23865 |
vulnerable | 2026-06-08 07:51:16.359794 |
Details available
MEDIUM (5.3)
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
Published: 2026-03-02T16:09:42.079Z
Updated: 2026-03-04T00:16:54.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27363 |
vulnerable | 2026-06-08 07:14:54.730363 |
Details available
HIGH (8.1)
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.
Published: 2025-03-11T13:28:31.705Z
Updated: 2026-04-19T22:08:52.695Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23022 |
vulnerable | 2026-06-08 07:10:55.093500 |
Details available
MEDIUM (4)
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-02-12T20:31:17.819Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27406 |
vulnerable | 2026-06-08 05:41:55.198249 |
Details available
FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.
Published: 2022-04-22T00:00:00.000Z
Updated: 2026-07-09T00:18:17.346Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27405 |
vulnerable | 2026-06-08 05:41:55.197800 |
Details available
FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.
Published: 2022-04-22T00:00:00.000Z
Updated: 2026-07-09T00:18:16.119Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27404 |
vulnerable | 2026-06-08 05:41:55.197254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15999 |
vulnerable | 2026-06-08 05:19:27.298434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6942 |
vulnerable | 2026-06-08 05:11:54.483188 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8287 |
vulnerable | 2026-06-08 05:10:07.994768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8105 |
vulnerable | 2026-06-08 05:10:07.186346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7864 |
vulnerable | 2026-06-08 05:10:06.250654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7858 |
vulnerable | 2026-06-08 05:10:06.245681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7857 |
vulnerable | 2026-06-08 05:10:06.245221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10328 |
vulnerable | 2026-06-08 05:07:17.773097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10244 |
vulnerable | 2026-06-08 05:07:17.621156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9383 |
vulnerable | 2026-06-08 05:07:13.634822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9382 |
vulnerable | 2026-06-08 05:07:13.634393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9381 |
vulnerable | 2026-06-08 05:07:13.633964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9290 |
vulnerable | 2026-06-08 05:07:13.528522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9747 |
vulnerable | 2026-06-08 05:06:12.916585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9746 |
vulnerable | 2026-06-08 05:06:12.916181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9745 |
vulnerable | 2026-06-08 05:06:12.915475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9675 |
vulnerable | 2026-06-08 05:06:12.398933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9674 |
vulnerable | 2026-06-08 05:06:12.398257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9673 |
vulnerable | 2026-06-08 05:06:12.397296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9672 |
vulnerable | 2026-06-08 05:06:12.396414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9671 |
vulnerable | 2026-06-08 05:06:12.395693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9670 |
vulnerable | 2026-06-08 05:06:12.394667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9669 |
vulnerable | 2026-06-08 05:06:12.393202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9668 |
vulnerable | 2026-06-08 05:06:12.392230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9667 |
vulnerable | 2026-06-08 05:06:12.391455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9666 |
vulnerable | 2026-06-08 05:06:12.390711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9665 |
vulnerable | 2026-06-08 05:06:12.389594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9664 |
vulnerable | 2026-06-08 05:06:12.388934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9663 |
vulnerable | 2026-06-08 05:06:12.387587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9662 |
vulnerable | 2026-06-08 05:06:12.386986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9661 |
vulnerable | 2026-06-08 05:06:12.386205 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9660 |
vulnerable | 2026-06-08 05:06:12.385343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9659 |
vulnerable | 2026-06-08 05:06:12.384213 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9658 |
vulnerable | 2026-06-08 05:06:12.379686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9657 |
vulnerable | 2026-06-08 05:06:12.378742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9656 |
vulnerable | 2026-06-08 05:06:12.374021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2241 |
vulnerable | 2026-06-08 05:05:28.034605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2240 |
vulnerable | 2026-06-08 05:05:28.002184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5670 |
vulnerable | 2026-06-08 05:02:57.974400 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5669 |
vulnerable | 2026-06-08 05:02:57.972365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5668 |
vulnerable | 2026-06-08 05:02:57.934746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1144 |
vulnerable | 2026-06-08 05:00:47.689415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1143 |
vulnerable | 2026-06-08 05:00:47.687502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1142 |
vulnerable | 2026-06-08 05:00:47.685465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1141 |
vulnerable | 2026-06-08 05:00:47.682662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1140 |
vulnerable | 2026-06-08 05:00:47.680842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1139 |
vulnerable | 2026-06-08 05:00:47.679055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1138 |
vulnerable | 2026-06-08 05:00:47.677092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1137 |
vulnerable | 2026-06-08 05:00:47.675037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1136 |
vulnerable | 2026-06-08 05:00:47.673231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1135 |
vulnerable | 2026-06-08 05:00:47.671393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1134 |
vulnerable | 2026-06-08 05:00:47.669519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1133 |
vulnerable | 2026-06-08 05:00:47.667673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1132 |
vulnerable | 2026-06-08 05:00:47.665723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1131 |
vulnerable | 2026-06-08 05:00:47.663932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1130 |
vulnerable | 2026-06-08 05:00:47.662114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1129 |
vulnerable | 2026-06-08 05:00:47.660253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1128 |
vulnerable | 2026-06-08 05:00:47.658510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1127 |
vulnerable | 2026-06-08 05:00:47.656674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1126 |
vulnerable | 2026-06-08 05:00:47.618030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0226 |
vulnerable | 2026-06-08 04:56:36.094422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3855 |
vulnerable | 2026-06-08 04:55:17.610908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3814 |
vulnerable | 2026-06-08 04:55:17.127991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3311 |
vulnerable | 2026-06-08 04:55:14.100824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3053 |
vulnerable | 2026-06-08 04:55:12.370038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2808 |
vulnerable | 2026-06-08 04:55:10.796537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2807 |
vulnerable | 2026-06-08 04:55:10.795629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2806 |
vulnerable | 2026-06-08 04:55:10.794894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2805 |
vulnerable | 2026-06-08 04:55:10.794097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2541 |
vulnerable | 2026-06-08 04:55:08.612426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2527 |
vulnerable | 2026-06-08 04:55:08.415367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2520 |
vulnerable | 2026-06-08 04:55:08.355274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2519 |
vulnerable | 2026-06-08 04:55:08.354232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2500 |
vulnerable | 2026-06-08 04:55:08.287175 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2499 |
vulnerable | 2026-06-08 04:55:08.286517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2498 |
vulnerable | 2026-06-08 04:55:08.285506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2497 |
vulnerable | 2026-06-08 04:55:08.283586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0946 |
vulnerable | 2026-06-08 04:51:12.421968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3506 |
vulnerable | 2026-06-08 04:49:54.121534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2754 |
vulnerable | 2026-06-08 04:49:45.944891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3467 |
vulnerable | 2026-06-08 04:49:09.436443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2661 |
vulnerable | 2026-06-08 04:49:07.284527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0747 |
vulnerable | 2026-06-08 04:48:55.131069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.