FreeType代码执行漏洞(CVE-2025-27363)

详细信息

漏洞类型

缓冲区错误

漏洞描述

FreeType 2.13.0及以下版本中存在越界写入漏洞（较新的FreeType版本不受影响），当尝试解析与TrueType GX和可变字体文件相关的字体子字形结构时会触发该漏洞。漏洞代码将一个有符号短整型值赋值给一个无符号长整型变量，然后加上一个静态值，导致其回绕并分配过小的堆缓冲区。随后代码会在此缓冲区边界外写入多达6个有符号长整型整数。可能会导致任意代码执行。 FreeType是一个被不同产品使用的通用开源组件、第三方库或协议。已知Amazon Linux 2、Debian stable、Devuan、RHEL、CentOS Stream、Alma Linux、GNU Guix、Mageia、OpenMandriva、openSUSE Leap、Slackware、Ubuntu 22.04、Android等系统受到此漏洞影响。请与具体供应商联系以获取有关补丁信息。

修复建议

请应用补丁commitef636696524b081f1b8819eb0c6a0b932d35757d，或升级到2.13.3或更高版本，参考链接： https://gitlab.freedesktop.org/freetype/freetype/-/commit/ef636696524b081f1b8819eb0c6a0b932d35757d https://freetype.org

参考链接

• http://www.openwall.com/lists/oss-security/2025/03/13/1

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/13/11

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/13/12

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/13/2

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/13/3

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/13/8

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/14/1

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/14/2

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/14/3

  OSV · Mailing List

• http://www.openwall.com/lists/oss-security/2025/03/14/4

  OSV · Mailing List

• https://access.redhat.com/security/cve/cve-2025-27363

  CNNVD

• https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html

  OSV · Mailing List

• https://nvd.nist.gov/vuln/detail/CVE-2025-27363

  CNNVD

• https://osv.dev/vulnerability/CVE-2025-27363

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-27363

  OSV

• https://security-tracker.debian.org/tracker/CVE-2025-27363

  OSV

• https://source.android.com/docs/security/bulletin/2025-05-01

  OSV · Third Party Advisory

• https://ubuntu.com/security/CVE-2025-27363

  OSV

• https://ubuntu.com/security/notices/USN-7352-1

  OSV

• https://ubuntu.com/security/notices/USN-7352-2

  OSV

• https://www.cve.org/CVERecord?id=CVE-2025-27363

  OSV

• https://www.facebook.com/security/advisories/cve-2025-27363

  CVE · x_refsource_CONFIRM

• http://www.openwall.com/lists/oss-security/2025/05/06/3

  OSV · Mailing List

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://source.android.com/security/bulletin/2025-05-01

  OSV

• https://android.googlesource.com/platform/external/freetype/+/f9c146bda91f441b7bebac4387e46ae40caaf3b1

  OSV

• https://osv.dev/vulnerability/ASB-A-399065987

  OSV

• https://security.alpinelinux.org/vuln/CVE-2025-27363

  OSV

• https://docs.bell-sw.com/security/cves/CVE-2025-27363

  OSV

• https://osv.dev/vulnerability/BELL-CVE-2025-27363

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2025-27363

  OSV

• https://osv.dev/vulnerability/ALPINE-CVE-2025-27363

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363

  OSV · US Government Resource

• https://github.com/kyamagu/skia-python/security/advisories/GHSA-2mhw-8qcg-gr96

  OSV

• https://github.com/kyamagu/skia-python

  OSV

• https://osv.dev/vulnerability/GHSA-2mhw-8qcg-gr96

  OSV

• http://www.openwall.com/lists/oss-security/2026/04/16/5

  NVD · Mailing List

• http://www.openwall.com/lists/oss-security/2026/04/19/3

  NVD · Mailing List