Red Hat Security Advisory

RHSA-2025:3421

freetype security update

Released 2025-03-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) freetype-2.9.1-10.el8_10, freetype-devel-2.9.1-10.el8_10

Fixes 1 record

TI-2025-20210 CVE-2025-27363 · GHSA-g8qj-jv5h-78cp

Out-of-bounds write in FreeType

CRITICAL 94KEV

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.27775 Published 2025-03-11 Partial fix CWE-787