CVE-2022-27404

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
freetypefreetype
𝑥
< 2.12.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freetype
bookworm
2.12.1+dfsg-5+deb12u3
fixed
bullseye
2.10.4+dfsg-1+deb11u1
fixed
sid
2.13.3+dfsg-1
fixed
stretch
no-dsa
trixie
2.13.3+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freetype
bionic
Fixed 2.8.1-2ubuntu2.2
released
focal
Fixed 2.10.1-2ubuntu0.2
released
impish
ignored
jammy
Fixed 2.11.1+dfsg-1ubuntu0.1
released
kinetic
not-affected
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
freetype2-devel
suse enterprise desktop 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise server 15
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP2
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP7
2.10.4-150000.4.12.1
fixed
ftdump
suse enterprise desktop 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP2
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP7
2.10.4-150000.4.12.1
fixed
libfreetype6
suse enterprise desktop 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise server 15
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP2
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP7
2.10.4-150000.4.12.1
fixed
libfreetype6-32bit
suse enterprise desktop 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise desktop 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise sap 15 SP7
2.10.4-150000.4.12.1
fixed
suse enterprise server 15
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP1
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP2
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP3
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP4
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP5
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP6
2.10.4-150000.4.12.1
fixed
suse enterprise server 15 SP7
2.10.4-150000.4.12.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
freetype
RHEL 8
0:2.9.1-9.el8
fixed
RHEL 8.6 AUS
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 E4S
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 EUS
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 TUS
0:2.9.1-5.el8_6.3
fixed
RHEL 9
0:2.10.4-9.el9
fixed
freetype-devel
RHEL 8
0:2.9.1-9.el8
fixed
RHEL 8.6 AUS
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 E4S
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 EUS
0:2.9.1-5.el8_6.3
fixed
RHEL 8.6 TUS
0:2.9.1-5.el8_6.3
fixed
RHEL 9
0:2.10.4-9.el9
fixed
Common Weakness Enumeration
References
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/
https://security.gentoo.org/glsa/202402-06
https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/
https://security.gentoo.org/glsa/202402-06