Back to CVE Browser

CVE-2022-27406

HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-04-22

Last Modified2026-07-09

Data SourcesNVD

Vulnerability Description

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.

Affected Platforms (CPE)

📦

Freetype

Freetype

< 2.12.0

💻

Fedoraproject

Fedora

= 34= 35= 36

References & Advisories

🔗 https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/

🔗 https://lists.fedoraproject.org/archives/list/[email protected]/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/

🔗 https://security.gentoo.org/glsa/202402-06

🔗 https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140

Related Vulnerabilities

CVE-2026-508116.5

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 ...

CVE-2025-273638.1

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attemptin...

CVE-2025-230224.0

FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.

CVE-2022-317827.8

ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.