CVE-2017-7857: FreeType

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c.

Affected products

• FreeType FreeType: from 2.7, before 2.8 (fixed in 2.8)

Published 2017-04-14. Last modified 2026-06-17.