[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUv5OJUJJYwA-XntC_r81Y6OTTPtHQ_enltMHkY2iv5s":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":86,"topProductsByCves":97,"seoMetadata":100,"meta":109},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":9,"versionCount":11,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":24},11352,"freetype",2,94,119,"2025-03-11","f",[15,18],{"id":16,"product_name":8,"version_count":17,"cve_count":10,"kev_count":9,"last_cve_update":12},46914,87,{"id":19,"product_name":20,"version_count":21,"cve_count":22,"kev_count":22,"last_cve_update":23},46915,"freetype2",32,0,null,"Freetype is a technology vendor with 2 tracked products and 94 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[26,34,40,49,54,60,66,71,76,81],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":4,"epssScore":33},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",9.6,"v3.1","Critical",0.63894,{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":31,"severity":38,"isKev":4,"epssScore":39},"CVE-2025-27363","An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.",8.1,"High",0.27775,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":48},"CVE-2006-2661","ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.","2006-05-30",5,"v2","Medium",false,0.1647,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":47,"epssScore":53},"CVE-2006-0747","Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.","2006-05-23",0.12715,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":45,"severity":38,"isKev":47,"epssScore":59},"CVE-2009-0946","Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth\u002Fftsmooth.c, (2) sfnt\u002Fttcmap.c, and (3) cff\u002Fcffload.c.","2009-04-17",7.5,0.08541,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":45,"severity":32,"isKev":47,"epssScore":65},"CVE-2011-2895","The LZW decompressor in (1) the BufCompressedFill function in fontfile\u002Fdecompress.c in X.Org libXfont before 1.4.4 and (2) compress\u002Fcompress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.","2011-08-19",9.3,0.08355,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":58,"cvssVersion":45,"severity":38,"isKev":47,"epssScore":70},"CVE-2014-9659","cff\u002Fcf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.","2015-02-08",0.07687,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":58,"cvssVersion":45,"severity":38,"isKev":47,"epssScore":75},"CVE-2014-2240","Stack-based buffer overflow in the cf2_hintmap_build function in cff\u002Fcf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.","2014-03-12",0.07013,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":64,"cvssVersion":45,"severity":32,"isKev":47,"epssScore":80},"CVE-2010-3311","Integer overflow in base\u002Fftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an \"input stream position error\" issue, a different vulnerability than CVE-2010-1797.","2011-01-07",0.06735,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":64,"cvssVersion":45,"severity":32,"isKev":47,"epssScore":85},"CVE-2011-0226","Integer signedness error in psaux\u002Ft1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.","2011-07-19",0.06646,[87,92],{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":31,"severity":38,"isKev":4,"epssScore":39,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":91},"FreeType Out-of-Bounds Write Vulnerability","2025-05-06","FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":4,"epssScore":33,"cisaVulnName":93,"cisaDateAdded":94,"cisaShortDescription":95,"cisaRequiredAction":96},"Google Chrome FreeType Heap Buffer Overflow Vulnerability","2021-11-03","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.","Apply updates per vendor instructions.",[98,99],{"id":16,"product_name":8,"version_count":17,"cve_count":10,"kev_count":9,"last_cve_update":12},{"id":19,"product_name":20,"version_count":21,"cve_count":22,"kev_count":22,"last_cve_update":23},{"title":101,"metaDescription":102,"keywords":103,"structuredData":104},"Freetype - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Freetype covering 2 products with 94 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Freetype vulnerabilities, Freetype security, Freetype CVE, Freetype threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Freetype KEV, Freetype exploited vulnerabilities",{"@context":105,"@type":106,"name":107,"description":102,"url":108},"https:\u002F\u002Fschema.org","Organization","Freetype","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ffreetype",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":12,"generatedAt":110,"apiVersion":111},"2026-10-16T23:13:31.146Z","3.0"]