{"id":"CVE-2022-27405","aliases":["A-271680254","ALPINE-CVE-2022-27405","ALSA-2022:7745","ALSA-2022:8340","ASB-A-271680254","AZL-9580","BELL-CVE-2022-27405","CLSA-2024-1710184311","CLSA-2026-1792607398","CLSA-2026-1792607806","DEBIAN-CVE-2022-27405","EUVD-2022-31908","GHSA-3p63-23m4-gmcp","JLSEC-2026-458","MGASA-2022-0184","OESA-2022-1655","RHSA-2022:7745","RHSA-2022:8340","RHSA-2024:0420","RLSA-2022:7745","RLSA-2022:8340","SUSE-SU-2022:3252-1","SUSE-SU-2022:3252-2","SUSE-SU-2025:20204-1","UBUNTU-CVE-2022-27405","USN-5528-1","openSUSE-SU-2024:12395-1"],"status":"published","title":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation...","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02829,"percentile":0.86715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-04-22T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"freetype","fixed_in":["2.10.4-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"freetype","fixed_in":["2.10.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"freetype","fixed_in":["2.10.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"freetype","fixed_in":["2.11.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freetype","fixed_in":["2.12.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220505-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.3_git20220601-r2"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/external/freetype","fixed_in":["11:2023-07-01","12:2023-07-01","12L:2023-07-01","13:2023-07-01"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"freetype","fixed_in":["2.12.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freetype","fixed_in":["2.11.1+dfsg-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"FreeType2_jll","fixed_in":["2.13.1+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"freetype","fixed_in":["2.8.1-2ubuntu2.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freetype","fixed_in":["2.10.1-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freetype","fixed_in":["2.11.1+dfsg-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220505-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3_git20220601-r2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-07-01"}]}],"versions":["11"]},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-07-01"}]}],"versions":["12"]},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-07-01"}]}],"versions":["12L"]},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-07-01"}]}],"versions":["13"]},{"source":"osv","ecosystem":"Azure Linux:2","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.11-19.el6_10.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"FreeType2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.13.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-2.1.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-2.1.mga8.tainted"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-4.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-4.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-2.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_6.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-9.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-9.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.3-1.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.2"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.1"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.2"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.1"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1"],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freetype","product":"freetype"}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139","tags":["x_transferred","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","tags":["vendor-advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","tags":["vendor-advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","tags":["vendor-advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","tags":["vendor-advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","tags":["vendor-advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202402-06","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27405","tags":["web","advisory"]},{"url":"http://freetype.com","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU"},{"url":"https://github.com/advisories/GHSA-3p63-23m4-gmcp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-27405","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7745","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27404","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27405","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27406","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077985","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077989","tags":["report"]},{"url":"https://bugzilla.redhat.com/2077991","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7745.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8340","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8340.html","tags":["advisory"]},{"url":"https://source.android.com/security/bulletin/2023-07-01","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/external/freetype/+/d45f0e49ab54065eb72d92aa3cc5f2152b0910b7","tags":["fix"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-27405","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1710184311.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792607398.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27406","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1792607806.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27405.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-27405","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0184.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30395","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1655","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27404","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077991","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7745.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27404","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27405","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27406","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8340.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0420","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0420.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7745","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8340","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223252-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198823","tags":["report"]},{"url":"https://bugzilla.suse.com/1198830","tags":["report"]},{"url":"https://bugzilla.suse.com/1198832","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27406","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223252-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520204-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035807","tags":["report"]},{"url":"https://bugzilla.suse.com/1036457","tags":["report"]},{"url":"https://bugzilla.suse.com/1079600","tags":["report"]},{"url":"https://bugzilla.suse.com/867620","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8287","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-27405","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5528-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27404","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27406","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-31782","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2610","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2026-07-09T00:18:16.119Z","updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-31908","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2026-07-09T00:18:16Z","updated_at":"2026-11-02T18:20:08.115071Z"}],"ghsa":[{"id":"GHSA-3p63-23m4-gmcp","title":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation...","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-23T00:03:04Z","modified":"2024-03-08T05:08:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:55:39.473736Z"}],"nvd":[{"id":"CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T14:15:09.483Z","modified":"2026-07-09T01:17:23.763Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:16.9948Z"}],"osv":[{"id":"ALPINE-CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T14:15:09.483Z","modified":"2026-11-03T07:30:35.106872133Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-9580","title":"CVE-2022-27405 affecting package freetype for versions less than 2.12.1-1","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T14:15:09Z","modified":"2026-04-21T04:35:04.747283Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"BELL-CVE-2022-27405","title":"CVE-2022-27405 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:39.333733Z","modified":"2026-01-26T09:49:00.198428Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T14:15:09.483Z","modified":"2026-11-03T08:01:08.480424038Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"JLSEC-2026-458","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function `FNT_Size_Request`.","status":"published","published":"2026-05-07T14:50:29.65Z","modified":"2026-07-25T18:24:29.38222312Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2022-1655","title":"freetype security update","description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats\n\nSecurity Fix(es):\n\nFreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.(CVE-2022-27404)\n\nFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.(CVE-2022-27405)\n\nFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.(CVE-2022-27406)","status":"published","published":"2022-05-18T11:04:55Z","modified":"2026-08-18T01:16:30.891177212Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7745","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:18Z","modified":"2026-07-05T10:01:15Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8340","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:25Z","modified":"2026-07-05T10:01:18Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2024:0420","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2024-09-16T08:18:32Z","modified":"2026-07-05T10:01:53Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2022:7745","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:27:55Z","modified":"2026-02-05T06:00:06.486706Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8340","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:21:54Z","modified":"2026-02-04T16:30:19.422626Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T14:15:00Z","modified":"2026-04-22T13:20:17.66164Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:7745","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:52.35903329Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8340","title":"Moderate: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* FreeType: Buffer overflow in sfnt_init_face (CVE-2022-27404)\n* FreeType: Segmentation violation via FNT_Size_Request (CVE-2022-27405)\n* Freetype: Segmentation violation via FT_Request_Size (CVE-2022-27406)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.871334421Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ASB-A-271680254","description":"In ft_open_face_internal of ftobjs.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2023-07-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:05.865114Z"},{"id":"CLSA-2024-1710184311","title":"freetype: Fix of 3 CVEs","description":"- CVE-2022-27404: Fix buffer overflow in sfnt_init_face\n- CVE-2022-27405: Fix segmentation violation via FNT_Size_Request\n- CVE-2022-27406: Fix segmentation violation via FT_Request_Size","status":"published","published":"2024-03-11T19:11:54Z","modified":"2026-06-01T00:33:04.162519376Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2026-1792607398","title":"freetype: Fix of 2 CVEs","description":"- CVE-2022-27405: Fix segmentation violation via FNT_Size_Request\n- CVE-2022-27406: Fix segmentation violation via FT_Request_Size","status":"published","published":"2026-10-21T18:30:10Z","modified":"2026-10-26T09:31:55.007902674Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792607806","title":"freetype: Fix of 2 CVEs","description":"- CVE-2022-27405: Fix segmentation violation via FNT_Size_Request\n- CVE-2022-27406: Fix segmentation violation via FT_Request_Size","status":"published","published":"2026-10-21T20:50:09Z","modified":"2026-10-26T09:31:41.050747414Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CVE-2022-27405","description":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.","status":"published","published":"2022-04-22T00:00:00Z","modified":"2026-10-28T02:30:20.842942218Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"MGASA-2022-0184","title":"Updated freetype2 packages fix security vulnerability","description":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to\ncontain a heap buffer overflow via the function sfnt_init_face.\n(CVE-2022-27404)\n\nFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to\ncontain a segmentation violation via the function FNT_Size_Request.\n(CVE-2022-27405)\n\nFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to\ncontain a segmentation violation via the function FT_Request_Size.\n(CVE-2022-27406)\n","status":"published","published":"2022-05-15T10:06:40Z","modified":"2026-04-16T04:43:43.315997241Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12395-1","title":"libQt5Pdf5-5.15.11-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:25:42.298664Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3252-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).\n- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).\n- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).\n\nNon-security fixes:\n\n- Updated to version 2.10.4\n","status":"published","published":"2022-09-12T07:08:18Z","modified":"2026-02-04T03:48:38.400462Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3252-2","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).\n- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).\n- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).\n\nNon-security fixes:\n\n- Updated to version 2.10.4\n","status":"published","published":"2022-09-22T09:26:38Z","modified":"2026-02-04T03:04:33.556912Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2025:20204-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\nUpdate to 2.13.2:\n\n* Some fields in the `FT_Outline` structure have been changed\n  from signed to unsigned type, which better reflects the actual\n  usage. It is also an additional means to protect against\n  malformed input.\n* Rare double-free crashes in the cache subsystem have been fixed.\n* Excessive stack allocation in the autohinter has been fixed.\n* The B/W  rasterizer has received a major upkeep that results in\n  large performance improvements.  The rendering speed has\n  increased and even doubled for very complex glyphs.\n","status":"published","published":"2025-04-24T14:44:51Z","modified":"2026-03-23T04:48:53.151267Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-5528-1","title":"freetype vulnerabilities","description":"It was discovered that FreeType did not correctly handle certain malformed\nfont files. If a user were tricked into using a specially crafted font\nfile, a remote attacker could cause FreeType to crash, or possibly execute\narbitrary code.\n","status":"published","published":"2022-07-20T13:13:56Z","modified":"2026-04-22T10:25:40.968691Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}