{"id":"CVE-2022-27404","aliases":["ALPINE-CVE-2022-27404","ALSA-2022:7745","ALSA-2022:8340","AZL-26757","AZL-9573","BELL-CVE-2022-27404","CLSA-2024-1710184311","DEBIAN-CVE-2022-27404","EUVD-2022-31907","GHSA-22wv-f9f6-xwwm","JLSEC-2026-457","MGASA-2022-0184","OESA-2022-1655","RHSA-2022:7745","RHSA-2022:8340","RHSA-2024:0420","RLSA-2022:7745","RLSA-2022:8340","SUSE-SU-2022:3252-1","SUSE-SU-2022:3252-2","SUSE-SU-2025:20204-1","UBUNTU-CVE-2022-27404","USN-5528-1","openSUSE-SU-2024:12279-1","openSUSE-SU-2024:12367-1","openSUSE-SU-2024:12395-1"],"status":"published","title":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer...","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02736,"percentile":0.86308,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-04-22T00:00:00Z","modified":"2026-11-03T08:01:08Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"freetype","fixed_in":["2.10.4-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"freetype","fixed_in":["2.10.4-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"freetype","fixed_in":["2.10.4-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"freetype","fixed_in":["2.11.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220505-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"qt5-qtbase","fixed_in":["5.15.9-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"freetype","fixed_in":["2.11.1-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"FreeType2_jll","fixed_in":["2.13.1+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freetype","fixed_in":["2.8.1-2ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freetype","fixed_in":["2.10.1-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freetype","fixed_in":["2.11.1+dfsg-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220505-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"FreeType2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.13.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-2.1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-2.1.mga8.tainted"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-4.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-4.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.2"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.1"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.2"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.1"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.6+kde177-1.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freetype","product":"freetype"}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202402-06","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27404","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU"},{"url":"https://github.com/advisories/GHSA-22wv-f9f6-xwwm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-27404","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7745","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27404","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27405","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27406","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077985","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077989","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077991","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7745.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8340","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8340.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-27404","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1710184311.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27404.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-27404","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0184.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30395","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27406","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077991","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7745.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27404","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27405","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27406","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8340.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0420","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0420.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7745","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8340","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223252-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198823","tags":["report"]},{"url":"https://bugzilla.suse.com/1198830","tags":["report"]},{"url":"https://bugzilla.suse.com/1198832","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27406","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223252-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520204-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035807","tags":["report"]},{"url":"https://bugzilla.suse.com/1036457","tags":["report"]},{"url":"https://bugzilla.suse.com/1079600","tags":["report"]},{"url":"https://bugzilla.suse.com/867620","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8287","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-27404","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5528-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27405","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-31782","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2610","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2024-08-03T05:25:32.67Z","updated_at":"2026-11-02T14:34:33.913527Z"}],"euvd":[{"id":"EUVD-2022-31907","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2024-08-03T05:25:32Z","updated_at":"2026-11-03T03:25:42.938735Z"}],"ghsa":[{"id":"GHSA-22wv-f9f6-xwwm","title":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer...","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-23T00:03:03Z","modified":"2024-03-08T05:08:45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:39.473736Z"}],"nvd":[{"id":"CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:09.423Z","modified":"2026-06-17T04:36:59.65Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:16.9948Z"}],"osv":[{"id":"ALPINE-CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:09.423Z","modified":"2026-11-03T07:30:35.207097345Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-26757","title":"CVE-2022-27404 affecting package qt5-qtbase for versions less than 5.15.9-1","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:09Z","modified":"2026-04-21T04:23:49.997908Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-9573","title":"CVE-2022-27404 affecting package freetype for versions less than 2.11.1-2","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:09Z","modified":"2026-04-21T04:35:04.725279Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"BELL-CVE-2022-27404","title":"CVE-2022-27404 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:54.232916Z","modified":"2026-01-26T09:46:11.285404Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:09.423Z","modified":"2026-11-03T08:01:08.485205181Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"JLSEC-2026-457","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function `sfnt_init_face`.","status":"published","published":"2026-05-07T14:50:29.65Z","modified":"2026-07-25T18:24:29.387739031Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1655","title":"freetype security update","description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats\n\nSecurity Fix(es):\n\nFreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.(CVE-2022-27404)\n\nFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.(CVE-2022-27405)\n\nFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.(CVE-2022-27406)","status":"published","published":"2022-05-18T11:04:55Z","modified":"2026-08-18T01:16:30.891177212Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7745","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:18Z","modified":"2026-07-05T10:01:15Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8340","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:25Z","modified":"2026-07-05T10:01:18Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:0420","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:32Z","modified":"2026-07-05T10:01:53Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2022:7745","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:27:55Z","modified":"2026-02-05T06:00:06.486706Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8340","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:21:54Z","modified":"2026-02-04T16:30:19.422626Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T14:15:00Z","modified":"2026-04-22T13:20:29.035444Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:7745","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:52.35903329Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8340","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.871334421Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2024-1710184311","title":"freetype: Fix of 3 CVEs","description":"- CVE-2022-27404: Fix buffer overflow in sfnt_init_face\n- CVE-2022-27405: Fix segmentation violation via FNT_Size_Request\n- CVE-2022-27406: Fix segmentation violation via FT_Request_Size","status":"published","published":"2024-03-11T19:11:54Z","modified":"2026-06-01T00:33:04.162519376Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CVE-2022-27404","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2026-10-28T02:30:31.019703898Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"MGASA-2022-0184","title":"Updated freetype2 packages fix security vulnerability","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to\ncontain a heap buffer overflow via the function sfnt_init_face.\n(CVE-2022-27404)\n\nFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to\ncontain a segmentation violation via the function FNT_Size_Request.\n(CVE-2022-27405)\n\nFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to\ncontain a segmentation violation via the function FT_Request_Size.\n(CVE-2022-27406)\n","status":"published","published":"2022-05-15T10:06:40Z","modified":"2026-04-16T04:43:43.315997241Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12279-1","title":"freetype2-devel-2.12.1-3.1 on GA media","description":"These are all security issues fixed in the freetype2-devel-2.12.1-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:26:35.352278Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12367-1","title":"libQt5Bootstrap-devel-static-32bit-5.15.6+kde177-1.1 on GA media","description":"These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.6+kde177-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:38:39.973037Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12395-1","title":"libQt5Pdf5-5.15.11-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:25:42.298664Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3252-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).\n- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).\n- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).\n\nNon-security fixes:\n\n- Updated to version 2.10.4\n","status":"published","published":"2022-09-12T07:08:18Z","modified":"2026-02-04T03:48:38.400462Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3252-2","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).\n- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).\n- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).\n\nNon-security fixes:\n\n- Updated to version 2.10.4\n","status":"published","published":"2022-09-22T09:26:38Z","modified":"2026-02-04T03:04:33.556912Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2025:20204-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\nUpdate to 2.13.2:\n\n* Some fields in the `FT_Outline` structure have been changed\n  from signed to unsigned type, which better reflects the actual\n  usage. It is also an additional means to protect against\n  malformed input.\n* Rare double-free crashes in the cache subsystem have been fixed.\n* Excessive stack allocation in the autohinter has been fixed.\n* The B/W  rasterizer has received a major upkeep that results in\n  large performance improvements.  The rendering speed has\n  increased and even doubled for very complex glyphs.\n","status":"published","published":"2025-04-24T14:44:51Z","modified":"2026-03-23T04:48:53.151267Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-5528-1","title":"freetype vulnerabilities","description":"It was discovered that FreeType did not correctly handle certain malformed\nfont files. If a user were tricked into using a specially crafted font\nfile, a remote attacker could cause FreeType to crash, or possibly execute\narbitrary code.\n","status":"published","published":"2022-07-20T13:13:56Z","modified":"2026-04-22T10:25:40.968691Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}