CVE-2022-27405: freetype freetype – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2022-27405

ALTO 7.5CVE-2022-27405 · Published 22/04/2022 · updated 09/07/2026

En resumen

CVE-2022-27405 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a freetype (freetype).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.8%, mayor que el 86.6% de las vulnerabilidades.
Solución: actualizar a 2.12.0 o posterior.

Package	Affected versions	Patched versions
freetype freetype	`< 2.12.0`	`2.12.0`

Description

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.

References

gitlab.freedesktop.org/freetype/freetype/-/issues/1139 · Issue Tracking
lists.fedoraproject.org/archives/list/[email protected]/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z
lists.fedoraproject.org/archives/list/[email protected]/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP
lists.fedoraproject.org/archives/list/[email protected]/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY
lists.fedoraproject.org/archives/list/[email protected]/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5
lists.fedoraproject.org/archives/list/[email protected]/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU
security.gentoo.org/glsa/202402-06
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU

Más vulnerabilidades de freetype

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free