Freetype
1 CVEs
product
Monthly
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
Integer Overflow
Freetype
Redhat
Suse
NVD
CVSS 3.1
4.0
EPSS
0.0%
CVE-2025-23022
EPSS 0%
CVSS 4.0
MEDIUM
POC
PATCH
Monitor
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
Integer Overflow
Freetype
+2
NVD