Known vulnerabilities in FreeType

Software: FreeType
Software CPE: cpe:2.3:a:freetype_org:freetype:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 17
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FreeType FreeType is affected by 17 known vulnerabilities: 2 critical, 4 high, 11 medium Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123884 - Integer overflow
CVE-2026-23865
CWE-190 Medium
No
No
2.14.2 11.03.2026 SB2026031140
SB2026031141
SB2026031523
and 49 more
#VU108929 - Integer overflow
CVE-2025-23022
CWE-190 Medium
No
No
2.9 12.05.2025 SB2025051239
SB2025051240
#VU105715 - Out-of-bounds write
CVE-2025-27363
CWE-787 Critical
Available
Exploited
2.13.1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU75888 - Integer overflow
CVE-2023-2004
CWE-190 High
No
No
2.13.0 09.05.2023 SB2023050976
SB2023050989
SB2023060845
and 34 more
#VU65639 - Out-of-bounds write
CVE-2022-27404
CWE-787 High
No
No
2.12.1 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 48 more
#VU65638 - Out-of-bounds read
CVE-2022-27406
CWE-125 Medium
No
No
2.12.1 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 41 more
#VU65637 - Out-of-bounds read
CVE-2022-27405
CWE-125 Medium
No
No
2.12.1 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 39 more
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999
CWE-122 Critical
Available
Exploited
2.10.4 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more
#VU32336 - Heap-based Buffer Overflow
CVE-2014-9674
CWE-122 Medium
No
No
2.5.4 08.02.2015 SB2015020802
SB2016021905
#VU32564 - Improper input validation
CVE-2014-2241
CWE-20 Medium
No
No
2.5.3 18.03.2014 SB2014031804
SB2014031324
#VU32478 - Stack-based buffer overflow
CVE-2014-2240
CWE-121 Medium
No
No
2.5.3 12.03.2014 SB2014031201
SB2014031316
SB2014031317
and 5 more
#VU43155 - Memory corruption
CVE-2012-5670
CWE-119 Medium
No
No
- 24.01.2013 SB2013012405
SB2014021106
SB2013011602
#VU32696 - NULL Pointer Dereference
CVE-2012-5668
CWE-476 Medium
No
No
2.4.11 24.01.2013 SB2013012401
SB2013041207
SB2014021106
and 1 more
#VU32698 - Memory corruption
CVE-2012-5669
CWE-119 Medium
No
No
2.4.11 24.01.2013 SB2013012402
SB2013041208
SB2013020304
and 2 more
#VU32807 - Memory corruption
CVE-2012-1126
CWE-119 High
No
No
2.4.9 25.04.2012 SB2012042501
SB2012051408
#VU32846 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-3256
CWE-94 Medium
No
No
2.4.7 14.10.2011 SB2011101401
SB2011111805
SB2011120806
and 2 more
#VU45484 - Heap-based Buffer Overflow
CVE-2010-3311
CWE-122 High
No
No
- 08.01.2011 SB2011010801