Vulnerability-Lookup

ubuntu-cve-2025-27363

Vulnerability from osv_ubuntu

Published

2025-03-11 14:15

Modified

2026-04-22 07:54

Summary

Details

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.

Severity

8.1 (High)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 (High)


                    
                      CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2025-27363	REPORT
	https://www.cve.org/CVERecord?id=CVE-2025-27363	REPORT
	https://www.facebook.com/security/advisories/cve-…	REPORT
	https://ubuntu.com/security/notices/USN-7352-1	ADVISORY
	https://ubuntu.com/security/notices/USN-7352-2	ADVISORY
	https://www.cisa.gov/known-exploited-vulnerabilit…	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.6.1-0.1ubuntu2.5+esm2"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.6.1-0.1ubuntu2.5+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.6.1-0.1ubuntu2.5+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.1-0.1ubuntu2.5+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.5.2-4ubuntu2",
        "2.6.1-0.1ubuntu1",
        "2.6.1-0.1ubuntu2",
        "2.6.1-0.1ubuntu2.1",
        "2.6.1-0.1ubuntu2.2",
        "2.6.1-0.1ubuntu2.3",
        "2.6.1-0.1ubuntu2.4",
        "2.6.1-0.1ubuntu2.5",
        "2.6.1-0.1ubuntu2.5+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.8.1-2ubuntu2.2+esm1"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.8.1-2ubuntu2.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.8.1-2ubuntu2.2+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.1-2ubuntu2.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.8-0.2ubuntu2",
        "2.8.1-0.1ubuntu2",
        "2.8.1-0.1ubuntu3",
        "2.8.1-2ubuntu1",
        "2.8.1-2ubuntu2",
        "2.8.1-2ubuntu2.1",
        "2.8.1-2ubuntu2.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.10.1-2ubuntu0.4"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.10.1-2ubuntu0.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.10.1-2ubuntu0.4?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.10.1-2ubuntu0.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.9.1-4",
        "2.10.1-2",
        "2.10.1-2ubuntu0.1",
        "2.10.1-2ubuntu0.2",
        "2.10.1-2ubuntu0.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.11.1+dfsg-1ubuntu0.3"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.11.1+dfsg-1ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.11.1+dfsg-1ubuntu0.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.1+dfsg-1ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.10.4+dfsg-1build1",
        "2.10.4+dfsg-1build2",
        "2.11.0+dfsg-1",
        "2.11.1+dfsg-1",
        "2.11.1+dfsg-1build1",
        "2.11.1+dfsg-1ubuntu0.1",
        "2.11.1+dfsg-1ubuntu0.2"
      ]
    }
  ],
  "aliases": [],
  "details": "An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.",
  "id": "UBUNTU-CVE-2025-27363",
  "modified": "2026-04-22T07:54:09Z",
  "published": "2025-03-11T14:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-27363"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-27363"
    },
    {
      "type": "REPORT",
      "url": "https://www.facebook.com/security/advisories/cve-2025-27363"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7352-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7352-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
    }
  ],
  "related": [
    "USN-7352-1",
    "USN-7352-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2025-27363"
  ]
}

CVE-2025-27363 (GCVE-0-2025-27363)

Vulnerability from cvelistv5 – Published: 2025-03-11 13:28 – Updated: 2026-04-19 22:08

Summary

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

Out-of-bounds Write (CWE-787)
CWE-787 - Out-of-bounds Write

Assigner

facebook

References

17 references

URL	Tags
https://www.facebook.com/security/advisories/cve-…	x_refsource_CONFIRM
https://source.android.com/docs/security/bulletin…	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
http://www.openwall.com/lists/oss-security/2025/03/13/1
http://www.openwall.com/lists/oss-security/2025/03/13/2
http://www.openwall.com/lists/oss-security/2025/03/13/3
http://www.openwall.com/lists/oss-security/2025/03/13/8
http://www.openwall.com/lists/oss-security/2025/0…
http://www.openwall.com/lists/oss-security/2025/0…
http://www.openwall.com/lists/oss-security/2025/03/14/1
http://www.openwall.com/lists/oss-security/2025/03/14/2
http://www.openwall.com/lists/oss-security/2025/03/14/3
http://www.openwall.com/lists/oss-security/2025/03/14/4
https://lists.debian.org/debian-lts-announce/2025…
http://www.openwall.com/lists/oss-security/2025/05/06/3
http://www.openwall.com/lists/oss-security/2026/04/16/5
http://www.openwall.com/lists/oss-security/2026/04/19/3

Impacted products

1 product

Vendor	Product	Version
FreeType	FreeType	Affected: 0.0.0 , ≤ 2.13.0 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-27363",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T03:55:53.843762Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-05-06",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T19:09:42.172Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory"
            ],
            "url": "https://source.android.com/docs/security/bulletin/2025-05-01"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-05-06T00:00:00.000Z",
            "value": "CVE-2025-27363 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-19T22:08:52.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/2"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/3"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/8"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/11"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/13/12"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/14/1"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/14/2"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/14/3"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/03/14/4"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/05/06/3"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/16/5"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/19/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FreeType",
          "vendor": "FreeType",
          "versions": [
            {
              "lessThanOrEqual": "2.13.0",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "dateAssigned": "2025-02-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds Write (CWE-787)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-13T12:54:55.748Z",
        "orgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
        "shortName": "facebook"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.facebook.com/security/advisories/cve-2025-27363"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4fc57720-52fe-4431-a0fb-3d2c8747b827",
    "assignerShortName": "facebook",
    "cveId": "CVE-2025-27363",
    "datePublished": "2025-03-11T13:28:31.705Z",
    "dateReserved": "2025-02-21T19:53:14.160Z",
    "dateUpdated": "2026-04-19T22:08:52.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

usn-7352-1

Vulnerability from osv_ubuntu

Published

2025-03-17 11:40

Modified

2026-04-22 07:37

Summary

freetype vulnerability

Details

It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker could use this issue to cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

URL

Type

	https://ubuntu.com/security/notices/USN-7352-1	ADVISORY
	https://ubuntu.com/security/CVE-2025-27363	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-27363",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.10.1-2ubuntu0.4"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.10.1-2ubuntu0.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.10.1-2ubuntu0.4?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.10.1-2ubuntu0.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.9.1-4",
        "2.10.1-2",
        "2.10.1-2ubuntu0.1",
        "2.10.1-2ubuntu0.2",
        "2.10.1-2ubuntu0.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-27363",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.11.1+dfsg-1ubuntu0.3"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.11.1+dfsg-1ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.11.1+dfsg-1ubuntu0.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.11.1+dfsg-1ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.10.4+dfsg-1build1",
        "2.10.4+dfsg-1build2",
        "2.11.0+dfsg-1",
        "2.11.1+dfsg-1",
        "2.11.1+dfsg-1build1",
        "2.11.1+dfsg-1ubuntu0.1",
        "2.11.1+dfsg-1ubuntu0.2"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that FreeType incorrectly handled certain memory\noperations when parsing font subglyph structures. A remote attacker could\nuse this issue to cause FreeType to crash, resulting in a denial of\nservice, or possibly execute arbitrary code.\n",
  "id": "USN-7352-1",
  "modified": "2026-04-22T07:37:17Z",
  "published": "2025-03-17T11:40:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7352-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-27363"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "freetype vulnerability",
  "upstream": [
    "UBUNTU-CVE-2025-27363"
  ]
}

usn-7352-2

Vulnerability from osv_ubuntu

Published

2025-03-17 14:23

Modified

2026-06-25 10:46

Summary

freetype vulnerabilities

Details

USN-7352-1 fixed a vulnerability in FreeType. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update also fixes an additional vulnerability in Ubuntu 14.04 LTS.

Original advisory details:

Additional advisory details:

It was discovered that FreeType incorrectly handled certain memory operations during typical execution. An attacker could possibly use this issue to cause FreeType to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-27406)

References

URL

Type

	https://ubuntu.com/security/notices/USN-7352-2	ADVISORY
	https://ubuntu.com/security/CVE-2022-27406	REPORT
	https://ubuntu.com/security/CVE-2025-27363	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-27406",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.5.2-1ubuntu2.8+esm3"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.5.2-1ubuntu2.8+esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.5.2-1ubuntu2.8+esm3?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.5.2-1ubuntu2.8+esm3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.4.12-0ubuntu1",
        "2.5.0.1-0ubuntu2",
        "2.5.1-1ubuntu1",
        "2.5.1-1ubuntu2",
        "2.5.1-2ubuntu1",
        "2.5.2-1ubuntu1",
        "2.5.2-1ubuntu2",
        "2.5.2-1ubuntu2.1",
        "2.5.2-1ubuntu2.2",
        "2.5.2-1ubuntu2.3",
        "2.5.2-1ubuntu2.4",
        "2.5.2-1ubuntu2.5",
        "2.5.2-1ubuntu2.6",
        "2.5.2-1ubuntu2.7",
        "2.5.2-1ubuntu2.8",
        "2.5.2-1ubuntu2.8+esm1",
        "2.5.2-1ubuntu2.8+esm2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-27363",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.6.1-0.1ubuntu2.5+esm2"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.6.1-0.1ubuntu2.5+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.6.1-0.1ubuntu2.5+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.1-0.1ubuntu2.5+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.5.2-4ubuntu2",
        "2.6.1-0.1ubuntu1",
        "2.6.1-0.1ubuntu2",
        "2.6.1-0.1ubuntu2.1",
        "2.6.1-0.1ubuntu2.2",
        "2.6.1-0.1ubuntu2.3",
        "2.6.1-0.1ubuntu2.4",
        "2.6.1-0.1ubuntu2.5",
        "2.6.1-0.1ubuntu2.5+esm1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2025-27363",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "freetype2-demos",
            "binary_version": "2.8.1-2ubuntu2.2+esm1"
          },
          {
            "binary_name": "libfreetype6",
            "binary_version": "2.8.1-2ubuntu2.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "freetype",
        "purl": "pkg:deb/ubuntu/freetype@2.8.1-2ubuntu2.2+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.1-2ubuntu2.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.8-0.2ubuntu2",
        "2.8.1-0.1ubuntu2",
        "2.8.1-0.1ubuntu3",
        "2.8.1-2ubuntu1",
        "2.8.1-2ubuntu2",
        "2.8.1-2ubuntu2.1",
        "2.8.1-2ubuntu2.2"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-7352-1 fixed a vulnerability in FreeType. This update provides the\ncorresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This\nupdate also fixes an additional vulnerability in Ubuntu 14.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that FreeType incorrectly handled certain memory\n operations when parsing font subglyph structures. A remote attacker could\n use this issue to cause FreeType to crash, resulting in a denial of\n service, or possibly execute arbitrary code. This issue only affected\n Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2025-27363)\n\nAdditional advisory details:\n\n It was discovered that FreeType incorrectly handled certain memory\n operations during typical execution. An attacker could possibly use\n this issue to cause FreeType to crash, resulting in a denial of\n service. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-27406)\n",
  "id": "USN-7352-2",
  "modified": "2026-06-25T10:46:42Z",
  "published": "2025-03-17T14:23:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7352-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-27406"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-27363"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "freetype vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2022-27406",
    "UBUNTU-CVE-2025-27363"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2025-27363

Vulnerability from osv_ubuntu

CVE-2025-27363 (GCVE-0-2025-27363)

usn-7352-1

Vulnerability from osv_ubuntu

usn-7352-2

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature