https://pwn.watch/t/freetype Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 06 May 2025 00:00:00 GMT https://pwn.watch/i/freetype-cve-2025-27363 https://pwn.watch/i/freetype-cve-2025-27363 Tue, 06 May 2025 00:00:00 GMT high <p>FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution. Added to CISA KEV on 2025-05-06.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-05-06: CISA added CVE-2025-27363 to the KEV catalog (due 2025-05-27).</li></ul> <p><strong>CVEs:</strong> CVE-2025-27363</p>