{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-23T01:56:39.502Z",
  "tag": {
    "id": "freetype",
    "label": "Freetype",
    "isStack": false,
    "url": "https://pwn.watch/t/freetype",
    "feed": "https://pwn.watch/t/freetype/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "freetype-cve-2025-27363",
      "title": "FreeType: Out-of-Bounds Write Vulnerability",
      "url": "https://pwn.watch/i/freetype-cve-2025-27363",
      "json": "https://pwn.watch/i/freetype-cve-2025-27363.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "FreeType",
      "tags": [
        "freetype",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-27363"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-05-06",
      "closedAt": "2025-05-06",
      "updatedAt": "2025-05-06",
      "summary": "FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution. Added to CISA KEV on 2025-05-06.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "freetype-cve-2025-27363",
      "incidentTitle": "FreeType: Out-of-Bounds Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-05-06",
      "title": "CISA added CVE-2025-27363 to the KEV catalog (due 2025-05-27).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/freetype-cve-2025-27363"
    }
  ]
}