medium4.0
CVE-2025-23022
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
Impact
FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freetype | Freetype | Version 2.8.1 |