Known vulnerabilities in freetype (Red Hat package)

Vendor: Red Hat Inc.
Software: freetype (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:freetype_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 5
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting freetype (Red Hat package) freetype (Red Hat package) is affected by 5 known vulnerabilities: 2 critical, 1 high, 2 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 2.9.1-6.el8_6.3, 2.9.1-7.el8_4, 2.9.1-10.el8_8, 2.9.1-10.el8_10, 2.10.4-10.el9_2 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU65639 - Out-of-bounds write
CVE-2022-27404		 CWE-787 High
No
No
 2.9.1-5.el8_6.3, 2.9.1-9.el8, 2.10.4-9.el9 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 48 more
#VU65638 - Out-of-bounds read
CVE-2022-27406		 CWE-125 Medium
No
No
 2.9.1-5.el8_6.3, 2.9.1-9.el8, 2.10.4-9.el9 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 41 more
#VU65637 - Out-of-bounds read
CVE-2022-27405		 CWE-125 Medium
No
No
 2.9.1-5.el8_6.3, 2.9.1-9.el8, 2.10.4-9.el9 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 39 more
#VU47741 - Heap-based Buffer Overflow
CVE-2020-15999		 CWE-122 Critical
Available
Exploited
 2.8-14.el7_9, 2.9.1-4.el8_0.1, 2.9.1-4.el8_1.1, 2.9.1-4.el8_2.1, 2.9.1-4.el8_3.1 20.10.2020 SB2020102038
SB2020102039
SB2020102040
and 43 more