MEIFP – Most Exploited Internet-Facing Products

FreeType

Products: FreeType

26.0

Score

CVEs

Active

PoC

KEV

#107

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-27363	2025-03-11	8.1v3.1	ACTIVE		High	None	no	26.0	FreeType	An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a s

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3