CVE-2025-27363 - CVE House
Back to Database
Status published High CVE-2025-27363

An out of bounds write exists in FreeType versions 2.13.0...

Vulnerability Description

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27363

Credits & Attribution

No credits recorded in the NVD database.

References

More from FreeType

View All →
CVE-2025-23022
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in...
Medium 4

Affected Vendor

Affected Software

FreeType
Vulnerable Versions:
0.0.0

Timeline

Official Publish: March 11th, 2025
Last Modified: April 19th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.