CVE-2022-27470: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Libsdl Sdl Ttf: up to and including 2.0.18

Published 2022-05-04. Last modified 2026-06-17.