CVE-2022-27406: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• FreeType FreeType: before 2.12.0 (fixed in 2.12.0)

Published 2022-04-22. Last modified 2026-07-09.