CVE-2025-27363HIGH 8.1CISA KEVEPSS p97.5%
CVE-2025-27363FreeType Out-of-Bounds Write Vulnerability
FreeType / FreeType
Description
FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.
Scoring
| CVSS 3.1 | 8.1 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 23.36% probability of exploitation · percentile 97.5% · 2026-06-18T12:00:27Z |
| Published | 2025-03-11 |
| Last modified | 2026-04-20 |
CISA KEV entry
Added to KEV: 2025-05-06
Underlying weaknesses· 1
References
- https://www.facebook.com/security/advisories/cve-2025-27363
- http://www.openwall.com/lists/oss-security/2025/03/13/1
- http://www.openwall.com/lists/oss-security/2025/03/13/11
- http://www.openwall.com/lists/oss-security/2025/03/13/12
- http://www.openwall.com/lists/oss-security/2025/03/13/2
- http://www.openwall.com/lists/oss-security/2025/03/13/3
- http://www.openwall.com/lists/oss-security/2025/03/13/8
- http://www.openwall.com/lists/oss-security/2025/03/14/1
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Out-of-bounds Writecwe-787 | 0% | live |
(incoming)1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| KEVEntry | FreeType Out-of-Bounds Write Vulnerabilitykev-cve-2025-27363 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.