CyberSecBulletin

FreeType vulnerabilities

We track 2 vulnerabilities in FreeType products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on March 11, 2025.

2vulnerabilities
1critical
1high
2exploited
8.8average CVSS score

Latest FreeType vulnerabilities

  • 8.1 High severity

    FreeType Out-of-Bounds Write Exploited

    CVE-2025-27363FreeTypeEPSS 27.8%

    An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short val

  • 9.6 Critical severity

    Google Chrome FreeType Heap Buffer Overflow Exploited

    CVE-2020-15999GoogleEPSS 63.9%

    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.