Security
FreeType advisories
The font renderer, which poppler uses for the text in a PDF and Pillow uses to draw text
4 advisories recorded for FreeType (freetype on Debian); the project is at https://gitlab.freedesktop.org/freetype/freetype. Newest first.
| Published | Advisory | Reaches you | What sillybos does |
|---|---|---|---|
| A CID-keyed font makes FreeType allocate and decrypt without end CVE-2026-95512 | by opening a file | Needs decoding to detect | |
| FreeType over-reads variation design coordinates CVE-2026-50811 | by opening a file | Needs decoding to detect | |
| An OpenType variable font's variation tables over-read in FreeType CVE-2026-23865 | by opening a file | Needs decoding to detect | |
| A variable TrueType font embedded in a PDF overruns a FreeType heap buffer CVE-2025-27363 | by opening a file | Needs decoding to detect |
Back to the whole watch.