EXPOSURES › CVE-2025-27363

CVE-2025-27363

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-05-06 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-27363 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

FreeType's out-of-bounds write vulnerability is actively exploited and could allow arbitrary code execution on systems using affected fonts.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

FreeType · vendor FreeType · product

DESCRIPTION

FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.