Red Hat Security AdvisoryRHSA-2025:3407
freetype security update
Released 2025-03-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) freetype-2.10.4-10.el9_5, freetype-devel-2.10.4-10.el9_5
- Red Hat Enterprise Linux BaseOS (v. 9) freetype-2.10.4-10.el9_5
Fixes 1 record
Priority CRITICAL 94KEV
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.27775 · Published 2025-03-11 · Partial fix CWE-787
