CVE-2022-27404: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• FreeType FreeType: before 2.12.0 (fixed in 2.12.0)

Published 2022-04-22. Last modified 2026-06-17.