Approved changes feed: RSS · Atom

cpe:2.3:a:freetype:freetype:2.8.1:*:*:*:*:*:*:*

part: a version: 2.8.1 update: *

VendorFreetype (3ee64c55-8e70-5aed-bb46-2872b7a192c1)
ProductFreetype (e391fb37-5a9a-519e-808f-1334610140ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freetype/freetype purl2cpe 2026-06-01 10:11:50.995201
pkg:gnu/freetype purl2cpe 2026-06-01 10:11:50.995202
pkg:rpm/fedora/freetype purl2cpe 2026-06-01 10:11:50.995204

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-23022 vulnerable 2026-06-08 07:10:55.094619 Details available
MEDIUM (4)
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
Published: 2025-01-10T00:00:00.000Z
Updated: 2025-02-12T20:31:17.819Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.