Critical severity9.8NVD Advisory· Published Apr 22, 2022· Updated Jun 17, 2026
CVE-2022-27404
CVE-2022-27404
Description
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
58cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- osv-coords52 versionspkg:apk/chainguard/freetypepkg:apk/chainguard/freetype-devpkg:apk/chainguard/freetype-docpkg:apk/chainguard/freetype-staticpkg:apk/wolfi/freetypepkg:apk/wolfi/freetype-devpkg:apk/wolfi/freetype-docpkg:apk/wolfi/freetype-staticpkg:rpm/almalinux/freetypepkg:rpm/almalinux/freetype-develpkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/freetype2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ft2demos&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/ft2demos&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/libqt5-qtbase&distro=openSUSE%20Tumbleweedpkg:rpm/suse/freetype2&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/freetype2&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Server%204.1
< 0+ 51 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 2.9.1-9.el8
- (no CPE)range: < 2.9.1-9.el8
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.12.1-3.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 5.15.6+kde177-1.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.13.3-1.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
Patches
Vulnerability mechanics
References
7- gitlab.freedesktop.org/freetype/freetype/-/issues/1138nvdExploitIssue TrackingPatchVendor Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/nvd
- security.gentoo.org/glsa/202402-06nvd
News mentions
0No linked articles in our index yet.