{"id":"CVE-2025-27363","aliases":["A-399065987","ALPINE-CVE-2025-27363","ALSA-2025:3421","ALSA-2025:8292","ASB-A-399065987","AZL-58354","BELL-CVE-2025-27363","CLSA-2025-1742926404","CLSA-2025-1745956171","CLSA-2025-1750780979","CLSA-2025-1755681299","CLSA-2026-1787310855","DEBIAN-CVE-2025-27363","DLA-4104-1","DSA-5880-1","EUVD-2025-6367","GHSA-g8qj-jv5h-78cp","JLSEC-2026-460","MGASA-2025-0099","OESA-2025-1300","RHSA-2025:3382","RHSA-2025:3383","RHSA-2025:3384","RHSA-2025:3385","RHSA-2025:3386","RHSA-2025:3387","RHSA-2025:3393","RHSA-2025:3395","RHSA-2025:3407","RHSA-2025:3421","RHSA-2025:8195","RHSA-2025:8219","RHSA-2025:8253","RHSA-2025:8292","RHSA-2025:9380","RLSA-2025:3407","RLSA-2025:3421","RLSA-2025:8292","ROOT-OS-ALPINE-315-CVE-2025-27363","SUSE-SU-2025:0960-1","SUSE-SU-2025:0998-1","UBUNTU-CVE-2025-27363","USN-7352-1","USN-7352-2"],"status":"published","title":"An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.27775,"percentile":0.98117,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2025-03-11T13:28:31Z","modified":"2026-11-05T16:32:28Z","kev":{"date_added":"2025-05-06","due_date":"2025-05-27","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-05-06"},{"source":"kev","since":"2025-05-06"}],"exploits":[{"source":"pocgithub","id":"zhuowei/CVE-2025-27363-proof-of-concept","title":"zhuowei/CVE-2025-27363-proof-of-concept","date":"2025-03-23","url":"https://github.com/zhuowei/CVE-2025-27363-proof-of-concept"},{"source":"pocgithub","id":"ov3rf1ow/CVE-2025-27363","title":"ov3rf1ow/CVE-2025-27363","date":"2025-05-26","url":"https://github.com/ov3rf1ow/CVE-2025-27363"},{"source":"pocgithub","id":"tin-z/CVE-2025-27363","title":"tin-z/CVE-2025-27363","date":"2025-07-23","url":"https://github.com/tin-z/CVE-2025-27363"}],"fixes":[{"ecosystem":"Alpine:v3.22","package":"freetype","fixed_in":["2.13.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"freetype","fixed_in":["2.13.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"freetype","fixed_in":["2.13.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"freetype","fixed_in":["2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"freetype-devel","fixed_in":["2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Android","package":"platform/external/freetype","fixed_in":["13:2025-05-01","14:2025-05-01"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"freetype","fixed_in":["2.13.1-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"freetype","fixed_in":["2.12.1-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"freetype","fixed_in":["2.13.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"freetype","fixed_in":["2.12.1-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"freetype","fixed_in":["2.13.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"freetype","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"freetype-demos","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"freetype-devel","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype","fixed_in":["2.10.4-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype-demos","fixed_in":["2.10.4-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype-devel","fixed_in":["2.10.4-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"freetype","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"freetype-demos","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"freetype-devel","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"freetype","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"freetype-demos","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"freetype-devel","fixed_in":["2.8-14.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"freetype2-demos","fixed_in":["2.8.1-2ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libfreetype6","fixed_in":["2.8.1-2ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libfreetype6-dev","fixed_in":["2.8.1-2ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"freetype","fixed_in":["2.12.1+dfsg-5+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freetype","fixed_in":["2.13.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freetype","fixed_in":["2.13.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"freetype","fixed_in":["2.10.4+dfsg-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Julia","package":"FreeType2_jll","fixed_in":["2.13.1+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"freetype2","fixed_in":["2.13.0-1.2.mga9","2.13.0-1.2.mga9.tainted"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"freetype","fixed_in":["2.12.1-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"freetype","fixed_in":["2.12.1-4.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"freetype","fixed_in":["2.13.2-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"freetype","fixed_in":["2.13.2-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"freetype","fixed_in":["2.10.2-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-7.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-devel","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-devel","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-6.el8_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype","fixed_in":["0:2.9.1-10.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-10.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-10.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-10.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-10.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-debuginfo","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-debugsource","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-devel","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-debuginfo","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-debugsource","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-7.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype","fixed_in":["0:2.9.1-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"freetype","fixed_in":["0:2.8-15.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"freetype-debuginfo","fixed_in":["0:2.8-15.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"freetype-devel","fixed_in":["0:2.8-15.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"freetype-demos","fixed_in":["0:2.8-15.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-devel","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debuginfo","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debugsource","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debuginfo","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debugsource","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-demos-debuginfo","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-devel","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win","fixed_in":["0:8.8-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win-x64","fixed_in":["0:8.8-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win-x86","fixed_in":["0:8.8-5.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw-freetype","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype-debuginfo","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype-static","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype-debuginfo","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype-static","fixed_in":["0:2.8-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win-x64","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win-x86","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win-x64","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win-x86","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win-x64","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win-x86","fixed_in":["0:8.6-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win-x64","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win-x86","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win-x64","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win-x86","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win-x64","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win-x86","fixed_in":["0:8.4-2.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win","fixed_in":["0:8.2-1.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win-x64","fixed_in":["0:8.2-1.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win-x86","fixed_in":["0:8.2-1.el8_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"freetype","fixed_in":["0:2.10.4-10.el9_5"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"freetype","fixed_in":["0:2.9.1-10.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"freetype","fixed_in":["2.11.1-r20071"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-freetype","fixed_in":["2.11.1-r20071"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"freetype2","fixed_in":["2.6.3-7.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ft2demos","fixed_in":["2.6.3-7.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"freetype2","fixed_in":["2.6.3-7.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ft2demos","fixed_in":["2.6.3-7.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"freetype2","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ft2demos","fixed_in":["2.10.4-150000.4.18.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freetype","fixed_in":["2.6.1-0.1ubuntu2.5+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freetype","fixed_in":["2.8.1-2ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"freetype","fixed_in":["2.10.1-2ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"freetype","fixed_in":["2.11.1+dfsg-1ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-05-01"}]}],"versions":["13"]},{"source":"osv","ecosystem":"Android","package":"platform/external/freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-05-01"}]}],"versions":["14"]},{"source":"osv","ecosystem":"Azure Linux:2","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.1-r0"},{"fixed":"2.12.1-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0-r6"},{"fixed":"2.13.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.1-r0"},{"fixed":"2.12.1-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0-r6"},{"fixed":"2.13.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-14.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"freetype2-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libfreetype6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libfreetype6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1+dfsg-5+deb12u4"}]}],"versions":["2.12.1+dfsg-5","2.12.1+dfsg-5+deb12u1","2.12.1+dfsg-5+deb12u2","2.12.1+dfsg-5+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4+dfsg-1+deb11u2"}]}],"versions":["2.10.4+dfsg-1","2.10.4+dfsg-1+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1+dfsg-5+deb12u4"}]}],"versions":["2.12.1+dfsg-5","2.12.1+dfsg-5+deb12u1","2.12.1+dfsg-5+deb12u2","2.12.1+dfsg-5+deb12u3"]},{"source":"osv","ecosystem":"Julia","package":"FreeType2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.13.1+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-1.2.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-1.2.mga9.tainted"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.2-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-7.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-6.el8_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-7.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-15.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-15.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-15.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"freetype-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-15.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-demos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"freetype-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.8-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.8-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.8-5.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.6-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4-2.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-1.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-1.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2-1.el8_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-10.el9_5"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-10.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r20071"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-r20071"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-7.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-7.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-7.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.3-7.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"freetype2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ft2demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.4-150000.4.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-0.1ubuntu2.5+esm2"}]}],"versions":["2.5.2-4ubuntu2","2.6.1-0.1ubuntu1","2.6.1-0.1ubuntu2","2.6.1-0.1ubuntu2.1","2.6.1-0.1ubuntu2.2","2.6.1-0.1ubuntu2.3","2.6.1-0.1ubuntu2.4","2.6.1-0.1ubuntu2.5","2.6.1-0.1ubuntu2.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+esm1"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1","2.8.1-2ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.4"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1","2.10.1-2ubuntu0.2","2.10.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.3"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1","2.11.1+dfsg-1ubuntu0.1","2.11.1+dfsg-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.4"}]}],"versions":["2.9.1-4","2.10.1-2","2.10.1-2ubuntu0.1","2.10.1-2ubuntu0.2","2.10.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1+dfsg-1ubuntu0.3"}]}],"versions":["2.10.4+dfsg-1build1","2.10.4+dfsg-1build2","2.11.0+dfsg-1","2.11.1+dfsg-1","2.11.1+dfsg-1build1","2.11.1+dfsg-1ubuntu0.1","2.11.1+dfsg-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1ubuntu2.8+esm3"}]}],"versions":["2.4.12-0ubuntu1","2.5.0.1-0ubuntu2","2.5.1-1ubuntu1","2.5.1-1ubuntu2","2.5.1-2ubuntu1","2.5.2-1ubuntu1","2.5.2-1ubuntu2","2.5.2-1ubuntu2.1","2.5.2-1ubuntu2.2","2.5.2-1ubuntu2.3","2.5.2-1ubuntu2.4","2.5.2-1ubuntu2.5","2.5.2-1ubuntu2.6","2.5.2-1ubuntu2.7","2.5.2-1ubuntu2.8","2.5.2-1ubuntu2.8+esm1","2.5.2-1ubuntu2.8+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-0.1ubuntu2.5+esm2"}]}],"versions":["2.5.2-4ubuntu2","2.6.1-0.1ubuntu1","2.6.1-0.1ubuntu2","2.6.1-0.1ubuntu2.1","2.6.1-0.1ubuntu2.2","2.6.1-0.1ubuntu2.3","2.6.1-0.1ubuntu2.4","2.6.1-0.1ubuntu2.5","2.6.1-0.1ubuntu2.5+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.1-2ubuntu2.2+esm1"}]}],"versions":["2.8-0.2ubuntu2","2.8.1-0.1ubuntu2","2.8.1-0.1ubuntu3","2.8.1-2ubuntu1","2.8.1-2ubuntu2","2.8.1-2ubuntu2.1","2.8.1-2ubuntu2.2"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"freetype","product":"freetype"}],"references":[{"url":"https://www.facebook.com/security/advisories/cve-2025-27363","tags":["x_refsource_CONFIRM","Third Party Advisory","advisory","web","article","report"]},{"url":"https://source.android.com/docs/security/bulletin/2025-05-01","tags":["vendor-advisory","Third Party Advisory","advisory","web"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363","tags":["government-resource","US Government Resource","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/1","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/2","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/3","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/8","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/11","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/12","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/1","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/2","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/3","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/4","tags":["Mailing List","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/06/3","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/16/5","tags":["Mailing List","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/19/3","tags":["Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g8qj-jv5h-78cp","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-27363","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3421","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27363","tags":["report"]},{"url":"https://bugzilla.redhat.com/2351357","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-3421.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8292","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32050","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32052","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32906","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32907","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32909","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32910","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32913","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357070","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359353","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359354","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359357","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8292.html","tags":["advisory"]},{"url":"https://source.android.com/security/bulletin/2025-05-01","tags":["advisory"]},{"url":"https://android.googlesource.com/platform/external/freetype/+/f9c146bda91f441b7bebac4387e46ae40caaf3b1","tags":["fix"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-27363","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1742926404.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745956171.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1750780979.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27406","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1755681299.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787310855.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27363.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27363","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0099.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34095","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/03/13/1","tags":["web"]},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1322","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1300","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3382","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351357","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3382.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27363","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3383","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3383.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3384","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3384.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3385","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3385.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3386","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3386.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3387","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3387.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3393","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3393.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3395","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3395.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3407","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3407.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3421.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8219","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8219.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8253","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8253.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359357","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8292.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32050","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/424","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32052","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/425","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32053","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/426","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32906","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/404","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32907","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/428","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32909","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/431","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32910","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/432","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/433","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32913","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/435","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9380","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9380.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:3407","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:3421","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8292","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250960-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239465","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27363","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250998-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27363","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7352-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7352-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27406","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T13:28:31.705Z","modified":"2026-04-19T22:08:52.695Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-6367","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T13:28:31Z","modified":"2026-04-19T22:08:52Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H","level":"high"}],"exploited_since":"2025-05-06","updated_at":"2026-11-02T19:24:22.924744Z"}],"ghsa":[{"id":"GHSA-g8qj-jv5h-78cp","title":"An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...","description":"An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T15:31:00Z","modified":"2026-04-20T00:30:13Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:07:33.028847Z"}],"kev":[{"id":"CVE-2025-27363","title":"FreeType Out-of-Bounds Write Vulnerability","description":"FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.","cwes":["CWE-787"],"kev":{"date_added":"2025-05-06","due_date":"2025-05-27","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T14:15:25.427Z","modified":"2026-06-17T09:03:27.973Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:10:53.93104Z"}],"osv":[{"id":"ALPINE-CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T14:15:25.427Z","modified":"2026-08-27T22:18:02.857148822Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-58354","title":"CVE-2025-27363 affecting package freetype for versions less than 2.13.1-1","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T14:15:25Z","modified":"2026-04-21T04:37:04.156078Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"BELL-CVE-2025-27363","status":"published","published":"2025-03-13T05:59:55.31051Z","modified":"2026-01-26T09:39:05.720658Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T13:28:31.705Z","modified":"2026-10-28T02:30:43.415732865Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H","level":"high"}],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T14:15:25.427Z","modified":"2026-09-01T20:05:45.137751393Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"JLSEC-2026-460","title":"An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font...","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2026-05-07T14:50:29.65Z","modified":"2026-07-18T00:02:03.381881123Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2025-1300","title":"freetype security update","description":"FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats\r\n\r\nSecurity Fix(es):\n\nAn out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.(CVE-2025-27363)","status":"published","published":"2025-03-21T11:08:24Z","modified":"2026-08-18T01:18:49.433030299Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:3382","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:54Z","modified":"2026-10-14T10:09:54Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3383","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:54Z","modified":"2026-10-14T10:09:55Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3384","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:55Z","modified":"2026-10-14T10:09:56Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3385","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:56Z","modified":"2026-10-14T10:09:56Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3386","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:56Z","modified":"2026-10-14T10:09:57Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3387","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:56Z","modified":"2026-10-14T10:09:58Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3393","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:59Z","modified":"2026-10-14T10:09:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3395","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-03-31T10:02:59Z","modified":"2026-10-14T10:10:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3407","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-04-01T10:03:07Z","modified":"2026-10-14T10:10:01Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3421","title":"Red Hat Security Advisory: freetype security update","status":"published","published":"2025-04-01T10:03:10Z","modified":"2026-10-14T10:10:02Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:8195","title":"Red Hat Security Advisory: mingw-freetype and spice-client-win security update","status":"published","published":"2025-05-27T10:03:23Z","modified":"2026-10-14T10:10:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8219","title":"Red Hat Security Advisory: spice-client-win security update","status":"published","published":"2025-05-28T10:07:48Z","modified":"2026-10-14T10:10:59Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8253","title":"Red Hat Security Advisory: spice-client-win security update","status":"published","published":"2025-05-29T10:03:28Z","modified":"2026-10-14T10:11:00Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8292","title":"Red Hat Security Advisory: mingw-freetype and spice-client-win security update","status":"published","published":"2025-05-29T10:03:34Z","modified":"2026-10-17T10:07:23Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9380","title":"Red Hat Security Advisory: spice-client-win security update","status":"published","published":"2025-06-24T10:03:08Z","modified":"2026-10-14T10:11:44Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:3407","title":"Important: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:40:13.627657Z","modified":"2025-10-07T17:39:17.925272Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:3421","title":"Important: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.\n\nSecurity Fix(es):\n\n* freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:33:24.795031Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:8292","title":"Important: mingw-freetype and spice-client-win security update","description":"MinGW Windows Freetype library.\n\nSecurity Fix(es):\n\n* freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\n* libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n\n* libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n\n* libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n\n* libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n\n* libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with Range header (CVE-2025-32907)\n\n* libsoup: NULL Pointer Dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n\n* libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on  client when server omits the \"realm\" parameter in an Unauthorized  response with Digest authentication (CVE-2025-32910)\n\n* libsoup: Double free on  soup_message_headers_get_content_disposition() through  \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n\n* libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:09.965894Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2025-27363","title":"CVE-2025-27363 in freetype - Patched by Root","description":"Root has patched CVE-2025-27363 in the freetype package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-09-30T07:15:31Z","modified":"2026-09-30T08:15:03.177296528Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","status":"published","published":"2025-03-11T14:15:00Z","modified":"2026-04-22T15:35:56.175326Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"ALSA-2025:3421","title":"Important: freetype security update","description":"FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs efficiently.  \n\nSecurity Fix(es):  \n\n  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-03-31T00:00:00Z","modified":"2026-10-29T11:02:28.466372321Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:8292","title":"Important: mingw-freetype security update","description":"MinGW Windows Freetype library.  \n\nSecurity Fix(es):  \n\n  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)\n  * libsoup: NULL Pointer Dereference on libsoup through function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n  * libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on client when server omits the \"realm\" parameter in an Unauthorized response with Digest authentication (CVE-2025-32910)\n  * libsoup: Double free on soup_message_headers_get_content_disposition() through \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when \"filename\" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-29T00:00:00Z","modified":"2026-10-29T11:02:23.207476897Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ASB-A-399065987","description":"In load_truetype_glyph of ttgload.c, there is a possible out of bounds write due to an integer overflow. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2025-05-01T00:00:00Z","modified":"2026-11-11T16:12:36.322289056Z","updated_at":"2026-11-10T17:35:07.135383Z"},{"id":"CLSA-2025-1742926404","title":"freetype: Fix of CVE-2025-27363","description":"- CVE-2025-27363: fix OOB write when parsing font subglyph structures","status":"published","published":"2025-03-25T18:13:29Z","modified":"2026-06-01T00:33:17.723305567Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1745956171","title":"freetype: Fix of CVE-2025-27363","description":"- CVE-2025-27363: fix out of bounds write in font subglyph structures parsing","status":"published","published":"2025-04-29T19:49:36Z","modified":"2026-06-01T00:30:53.435411255Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1750780979","title":"freetype: Fix of 4 CVEs","description":"- CVE-2025-27363: fix OOB write when parsing font subglyph structures","status":"published","published":"2026-07-06T15:17:35Z","modified":"2026-10-26T09:31:20.829322723Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1755681299","title":"freetype: Fix of 4 CVEs","description":"- CVE-2025-27363: fix OOB write when parsing font subglyph structures","status":"published","published":"2026-07-06T15:21:04Z","modified":"2026-10-26T09:31:57.686111399Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1787310855","title":"Fix CVE(s): CVE-2025-27363","description":"   * SECURITY UPDATE: out-of-bounds write when parsing composite subglyphs\n     of TrueType GX / variable fonts (ELSCVE-171535)\n     - debian/patches-freetype/CVE-2025-27363.patch: reject a subglyph count\n       that truncates to a negative short in load_truetype_glyph before it\n       is used to size the outline arrays in src/truetype/ttgload.c.\n     - CVE-2025-27363","status":"published","published":"2026-08-21T11:14:26Z","modified":"2026-10-26T09:31:34.047258255Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"DLA-4104-1","title":"freetype - security update","status":"published","published":"2025-04-01T00:00:00Z","modified":"2026-03-09T01:21:40.025Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5880-1","title":"freetype - security update","status":"published","published":"2025-03-17T00:00:00Z","modified":"2026-03-09T02:11:12.6179Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2025-0099","title":"Updated freetype2 packages fix security vulnerability","description":"An out of bounds write exists in FreeType versions 2.13.0 and below\nwhen attempting to parse font subglyph structures related to TrueType\nGX and variable font files which may result in arbitrary code execution.\n","status":"published","published":"2025-03-16T05:09:13Z","modified":"2026-04-16T04:44:19.802831569Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-SU-2025:0960-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font \n  subglyph structures related to TrueType GX and variable font files (bsc#1239465).\n","status":"published","published":"2025-03-19T18:34:08Z","modified":"2026-02-04T03:46:55.578942Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:0998-1","title":"Security update for freetype2","description":"This update for freetype2 fixes the following issues:\n\n- CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font \n  subglyph structures related to TrueType GX and variable font files (bsc#1239465).\n","status":"published","published":"2025-03-25T02:07:21Z","modified":"2026-02-04T04:27:25.345838Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7352-1","title":"freetype vulnerability","description":"It was discovered that FreeType incorrectly handled certain memory\noperations when parsing font subglyph structures. A remote attacker could\nuse this issue to cause FreeType to crash, resulting in a denial of\nservice, or possibly execute arbitrary code.\n","status":"published","published":"2025-03-17T11:40:05Z","modified":"2026-04-22T10:56:36.536052Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7352-2","title":"freetype vulnerabilities","description":"USN-7352-1 fixed a vulnerability in FreeType. This update provides the\ncorresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This\nupdate also fixes an additional vulnerability in Ubuntu 14.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that FreeType incorrectly handled certain memory\n operations when parsing font subglyph structures. A remote attacker could\n use this issue to cause FreeType to crash, resulting in a denial of\n service, or possibly execute arbitrary code. This issue only affected\n Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2025-27363)\n\nAdditional advisory details:\n\n It was discovered that FreeType incorrectly handled certain memory\n operations during typical execution. An attacker could possibly use\n this issue to cause FreeType to crash, resulting in a denial of\n service. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-27406)\n","status":"published","published":"2025-03-17T14:23:29Z","modified":"2026-06-25T13:32:30.305634744Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}