Threats Tagged 'cve-2025-27363'

This Red Hat security advisory addresses multiple vulnerabilities in the mingw-freetype library and libsoup components affecting Red Hat Enterprise Linux 8 and related products. The issues include out-of-bounds writes, integer overflows, heap buffer overflows, null pointer dereferences, double frees, and denial of service conditions. These vulnerabilities impact font parsing and HTTP request handling functionalities. Red Hat has released updated packages to fix these issues. The advisory rates the security impact as Important and provides detailed fixes for each vulnerability. No known exploits in the wild have been reported at this time.

A security vulnerability (CVE-2025-27363) exists in FreeType, a font engine used to load and render fonts. The flaw is an out-of-bounds (OOB) write occurring when parsing font subglyph structures related to TrueType GX and variable font files. Red Hat has issued an important security update for FreeType in Red Hat Enterprise Linux 9 to address this issue. The update fixes the vulnerability by correcting the parsing logic to prevent the OOB write.