FreeType vulnerabilities
3 published CVEs name FreeType among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 3
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 1
Critical 0High 1Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20261
Known exploitedNewest addition to KEV first
- CVE-2025-27363
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph…
FreeType · FreeType
ExploitedHigh8.1
Newest CVEs
- CVE-2026-23865
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read…
FreeType · FreeType
Medium5.3 - CVE-2025-27363
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph…
FreeType · FreeType
ExploitedHigh8.1 - CVE-2025-23022
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
FreeType · FreeType
Medium4.0