Catalogo CVE

CVE-2022-27404

freetype: CVE-2022-27404

[Catalogo CVE]

Gravità
High · CVSS 7.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.74% · Oct 22, 2026

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfreetypesid2.14.3+dfsg-3fixed
Debianfreetypeforky2.14.3+dfsg-3fixed
Debianfreetypetrixie2.13.3+dfsg-1+deb13u1fixed
Debianfreetypetrixie-security2.13.3+dfsg-1+deb13u1fixed
Debianfreetypebookworm2.12.1+dfsg-5+deb12u4fixed
Debianfreetypebookworm-security2.12.1+dfsg-5+deb12u4fixed
Ubuntufreetype18.042.8-0.2ubuntu2vulnerable
Ubuntufreetype18.042.8.1-0.1ubuntu2vulnerable
Ubuntufreetype18.042.8.1-0.1ubuntu3vulnerable
Ubuntufreetype18.042.8.1-2ubuntu1vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2.1vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2.2fixed
Ubuntufreetype20.042.9.1-4vulnerable
Ubuntufreetype20.042.10.1-2vulnerable
Ubuntufreetype20.042.10.1-2ubuntu0.1vulnerable
Ubuntufreetype20.042.10.1-2ubuntu0.2fixed
Ubuntufreetype22.042.10.4+dfsg-1build1vulnerable
Ubuntufreetype22.042.10.4+dfsg-1build2vulnerable
Ubuntufreetype22.042.11.0+dfsg-1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1build1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1ubuntu0.1fixed
Ubuntufreetype18.042.8-0.2ubuntu2vulnerable
Ubuntufreetype18.042.8.1-0.1ubuntu2vulnerable
Ubuntufreetype18.042.8.1-0.1ubuntu3vulnerable
Ubuntufreetype18.042.8.1-2ubuntu1vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2.1vulnerable
Ubuntufreetype18.042.8.1-2ubuntu2.2fixed
Ubuntufreetype20.042.9.1-4vulnerable
Ubuntufreetype20.042.10.1-2vulnerable
Ubuntufreetype20.042.10.1-2ubuntu0.1vulnerable
Ubuntufreetype20.042.10.1-2ubuntu0.2fixed
Ubuntufreetype22.042.10.4+dfsg-1build1vulnerable
Ubuntufreetype22.042.10.4+dfsg-1build2vulnerable
Ubuntufreetype22.042.11.0+dfsg-1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1build1vulnerable
Ubuntufreetype22.042.11.1+dfsg-1ubuntu0.1fixed
Susefreetype2linux enterprise module for basesystem 15 sp32.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise module for basesystem 15 sp42.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise module for desktop applications 15 sp32.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise module for desktop applications 15 sp42.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise micro 5.12.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise micro 5.22.10.4-150000.4.12.1fixed
Opensusefreetype2leap micro 5.22.10.4-150000.4.12.1fixed
Opensusefreetype2leap 15.32.10.4-150000.4.12.1fixed
Opensuseft2demosleap 15.32.10.4-150000.4.12.1fixed
Opensusefreetype2leap 15.42.10.4-150000.4.12.1fixed
Opensuseft2demosleap 15.42.10.4-150000.4.12.1fixed
Opensusefreetype2tumbleweed2.12.1-3.1fixed
Susefreetype2linux enterprise high performance computing 15-espos2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise high performance computing 15-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise high performance computing 15 sp1-espos2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise high performance computing 15 sp1-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise high performance computing 15 sp2-espos2.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise high performance computing 15 sp2-espos2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise high performance computing 15 sp2-ltss2.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise high performance computing 15 sp2-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server 15-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server 15 sp1-bcl2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server 15 sp1-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server 15 sp2-bcl2.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise server 15 sp2-bcl2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server 15 sp2-ltss2.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise server 15 sp2-ltss2.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server for sap applications 152.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server for sap applications 15 sp12.10.4-150000.4.12.1fixed
Susefreetype2linux enterprise server for sap applications 15 sp22.10.4-150000.4.12.1fixed
Suseft2demoslinux enterprise server for sap applications 15 sp22.10.4-150000.4.12.1fixed
Susefreetype2manager proxy 4.12.10.4-150000.4.12.1fixed
Suseft2demosmanager proxy 4.12.10.4-150000.4.12.1fixed
Susefreetype2manager retail branch server 4.12.10.4-150000.4.12.1fixed
Suseft2demosmanager retail branch server 4.12.10.4-150000.4.12.1fixed
Susefreetype2manager server 4.12.10.4-150000.4.12.1fixed
Suseft2demosmanager server 4.12.10.4-150000.4.12.1fixed
Susefreetype2enterprise storage 62.10.4-150000.4.12.1fixed
Susefreetype2enterprise storage 72.10.4-150000.4.12.1fixed
Suseft2demosenterprise storage 72.10.4-150000.4.12.1fixed
Opensuselibqt5-qtbasetumbleweed5.15.6+kde177-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfreetypesourcesid2.11.1+dfsg-2not yet assignedNot reported[1010183]
Debianfreetypesourceforky2.11.1+dfsg-2not yet assignedNot reported[1010183]
Debianfreetypesourcetrixie2.11.1+dfsg-2not yet assignedNot reported[1010183]
Debianfreetypesourcebookworm2.11.1+dfsg-2not yet assignedNot reported[1010183]
Ubuntufreetypedeb18.042.8.1-2ubuntu2.2Not reportedUBUNTU-CVE-2022-27404Not reported
Ubuntufreetypedeb20.042.10.1-2ubuntu0.2Not reportedUBUNTU-CVE-2022-27404Not reported
Ubuntufreetypedeb22.042.11.1+dfsg-1ubuntu0.1Not reportedUBUNTU-CVE-2022-27404Not reported
Ubuntufreetypedeb18.042.8.1-2ubuntu2.2Not reportedUSN-5528-1Not reported
Ubuntufreetypedeb20.042.10.1-2ubuntu0.2Not reportedUSN-5528-1Not reported
Ubuntufreetypedeb22.042.11.1+dfsg-1ubuntu0.1Not reportedUSN-5528-1Not reported
Susefreetype2rpmlinux enterprise module for basesystem 15 sp32.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Susefreetype2rpmlinux enterprise module for basesystem 15 sp42.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Suseft2demosrpmlinux enterprise module for desktop applications 15 sp32.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Suseft2demosrpmlinux enterprise module for desktop applications 15 sp42.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Susefreetype2rpmlinux enterprise micro 5.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Susefreetype2rpmlinux enterprise micro 5.22.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensusefreetype2rpmleap micro 5.22.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensusefreetype2rpmleap 15.32.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensuseft2demosrpmleap 15.32.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensusefreetype2rpmleap 15.42.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensuseft2demosrpmleap 15.42.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-1Not reported
Opensusefreetype2rpmtumbleweed2.12.1-3.1Not reportedOPENSUSE-SU-2024:12279-1Not reported
Susefreetype2rpmlinux enterprise high performance computing 15-espos2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise high performance computing 15-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise high performance computing 15 sp1-espos2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise high performance computing 15 sp1-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise high performance computing 15 sp2-espos2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmlinux enterprise high performance computing 15 sp2-espos2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise high performance computing 15 sp2-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmlinux enterprise high performance computing 15 sp2-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server 15-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server 15 sp1-bcl2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server 15 sp1-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server 15 sp2-bcl2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmlinux enterprise server 15 sp2-bcl2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server 15 sp2-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmlinux enterprise server 15 sp2-ltss2.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server for sap applications 152.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server for sap applications 15 sp12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmlinux enterprise server for sap applications 15 sp22.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmlinux enterprise server for sap applications 15 sp22.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmmanager proxy 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmmanager proxy 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmmanager retail branch server 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmmanager retail branch server 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmmanager server 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmmanager server 4.12.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmenterprise storage 62.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Susefreetype2rpmenterprise storage 72.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Suseft2demosrpmenterprise storage 72.10.4-150000.4.12.1Not reportedSUSE-SU-2022:3252-2Not reported
Opensuselibqt5-qtbaserpmtumbleweed5.15.6+kde177-1.1Not reportedOPENSUSE-SU-2024:12367-1Not reported

[Debian bug #1010183]

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[Debian 12 (Bookworm)]

  • [freetype2-demos]Sconosciuto

    Pacchetto sorgente: [freetype]

    Dettagli (4)
    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

  • [freetype2-doc]Sconosciuto

    Pacchetto sorgente: [freetype]

    Dettagli (4)
    • 2.12.1+dfsg-5+deb12u4 · all · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · all · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

  • [libfreetype6]Sconosciuto

    Pacchetto sorgente: [freetype]

    Dettagli (4)
    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

  • [libfreetype6-dev]Sconosciuto

    Pacchetto sorgente: [freetype]

    Dettagli (4)
    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

  • [libfreetype-dev]Sconosciuto

    Pacchetto sorgente: [freetype]

    Dettagli (4)
    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · amd64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

    • 2.12.1+dfsg-5+deb12u4 · arm64 · bookworm-security

      Corretta · Corretta: 2.11.1+dfsg-2

      dsa · freetype · debian · bookworm

[openSUSE Tumbleweed]

  • [freetype2-devel]Sconosciuto

    Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · noarch · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • [ftdump]Sconosciuto

    Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • [libfreetype6]Sconosciuto

    Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • [libfreetype6-32bit]Sconosciuto

    Pacchetto sorgente: [freetype2]

    Dettagli (1)
    • 2.14.3-1.2 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 2.12.1-3.1

      Version impact unknown

      dsa · freetype2 · opensuse · tumbleweed

  • Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Concurrent5]Sconosciuto

    Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core5]Sconosciuto

    Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core5-32bit]Sconosciuto

    Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

  • [libQt5Core-devel]Sconosciuto

    Pacchetto sorgente: [libqt5-qtbase]

    Dettagli (1)
    • 5.15.19+kde96-1.3 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 5.15.6+kde177-1.1

      Version impact unknown

      dsa · libqt5-qtbase · opensuse · tumbleweed

Altri risultati

Osservato:

Riferimenti