[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOk09kHvTHEyJ2tTBfpX4cJS0toHbqvbcwHjNpkPZ0rk":3,"g5a-risk:CVE-2025-27363":181},{"success":4,"data":5,"meta":178},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":25,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":47,"references":48,"referencesCount":102,"weaknesses":103,"weaknessesCount":112,"isActivelyExploited":4,"cisaInfo":113,"otxData":25,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":156,"notableEvents":157},"CVE-2025-27363","What is CVE-2025-27363?","An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph st...","2025-03-11T14:15:25.427","2025-10-27T17:06:41.997",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"cve-assign@fb.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],0.27775,[34,34,34,34,34,34,34],"High",[38,42],{"vendor":39,"product":39,"version":40,"criteria":41,"vulnerable":4},"freetype","*","cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"debian","debian_linux","11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",2,[49,54,59,62,65,68,71,74,77,80,83,86,89,93,97],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fwww.facebook.com\u002Fsecurity\u002Fadvisories\u002Fcve-2025-27363","Facebook",[53],"Third Party Advisory",{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F1","Openwall",[58],"Mailing List",{"url":60,"source":56,"tags":61},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F11",[58],{"url":63,"source":56,"tags":64},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F12",[58],{"url":66,"source":56,"tags":67},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F2",[58],{"url":69,"source":56,"tags":70},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F3",[58],{"url":72,"source":56,"tags":73},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F13\u002F8",[58],{"url":75,"source":56,"tags":76},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F14\u002F1",[58],{"url":78,"source":56,"tags":79},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F14\u002F2",[58],{"url":81,"source":56,"tags":82},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F14\u002F3",[58],{"url":84,"source":56,"tags":85},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F03\u002F14\u002F4",[58],{"url":87,"source":56,"tags":88},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2025\u002F05\u002F06\u002F3",[58],{"url":90,"source":91,"tags":92},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F03\u002Fmsg00030.html","Debian",[58],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fsource.android.com\u002Fdocs\u002Fsecurity\u002Fbulletin\u002F2025-05-01","Android",[53],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363","CISA",[101],"US Government Resource",15,[104],{"id":105,"name":106,"description":107,"extendedDescription":108,"status":109,"abstraction":110,"structure":111},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,{"shortDescription":108,"requiredAction":108,"vulnerabilityName":108,"dateAdded":25},[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2025-27363? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-27363, a high severity cyber security vulnerability from 2025. An out of bounds write exists in FreeType versions 2.13.0 a...","CVE-2025-27363, CVE-2025-27363 vulnerability, CVE-2025-27363 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, freetype security, debian security, freetype vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2025-27363",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":10,"dateModified":11,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-27363","Cybersecurity","CVE-2025-27363, CVE-2025-27363 vulnerability, CVE-2025-27363 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141,150],{"Operator":25,"Negate":25,"Nodes":142},[143],{"Operator":144,"Negate":145,"CPEMatch":146},"OR",false,[147],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":148,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":149},"47088474-E5B5-4220-8F12-D664F2DED5C1","2.13.0",{"Operator":25,"Negate":25,"Nodes":151},[152],{"Operator":144,"Negate":145,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":155,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[158,165,171],{"id":159,"eventType":160,"eventTime":161,"details":162,"label":163,"color":164},"1a1bf7a8-a265-42bc-9cb4-8ce4e0af900c","NEW_CISA","2025-05-06T23:45:02.770576+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":166,"eventType":167,"eventTime":168,"details":169,"label":170,"color":164},"5073135a-138d-4c58-841b-8661b06b3986","HIGH_EPSS_DELTA","2025-06-11T10:09:42.900359+00:00","Daily EPSS score increased by 0.607 on 2025-03-13","EPSS Score Increased",{"id":172,"eventType":173,"eventTime":174,"details":175,"label":176,"color":177},"61e8173e-92ce-4caa-8670-ca3b048dcd3b","LOW_EPSS_DELTA","2025-11-22T04:03:44.638297+00:00","Daily EPSS score decreased by 0.129 on 2025-03-13","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":179,"version":180},1792250418598,"2.0",{"score":182,"band":36,"action":183,"scoredAt":184},76,"Emergency patch","2026-10-16T07:06:19.657489+00:00"]