Unrated severityNVD Advisory· Published Apr 22, 2022· Updated Aug 3, 2024
CVE-2022-27404
CVE-2022-27404
Description
FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.
Affected products
53- FreeType/FreeTypedescription
- osv-coords52 versionspkg:apk/chainguard/freetypepkg:apk/chainguard/freetype-devpkg:apk/chainguard/freetype-docpkg:apk/chainguard/freetype-staticpkg:apk/wolfi/freetypepkg:apk/wolfi/freetype-devpkg:apk/wolfi/freetype-docpkg:apk/wolfi/freetype-staticpkg:rpm/almalinux/freetypepkg:rpm/almalinux/freetype-develpkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/freetype2&distro=openSUSE%20Leap%20Micro%205.2pkg:rpm/opensuse/freetype2&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/ft2demos&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/ft2demos&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/libqt5-qtbase&distro=openSUSE%20Tumbleweedpkg:rpm/suse/freetype2&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/freetype2&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/freetype2&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/freetype2&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4pkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/ft2demos&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/ft2demos&distro=SUSE%20Manager%20Server%204.1
< 0+ 51 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 2.9.1-9.el8
- (no CPE)range: < 2.9.1-9.el8
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.12.1-3.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 5.15.6+kde177-1.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.13.3-1.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
- (no CPE)range: < 2.10.4-150000.4.12.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/mitrevendor-advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/mitrevendor-advisory
- security.gentoo.org/glsa/202402-06mitrevendor-advisory
- gitlab.freedesktop.org/freetype/freetype/-/issues/1138mitre
News mentions
0No linked articles in our index yet.