FreeType: memory reading vulnerability compromises system security

A memory read out-of-bounds vulnerability has been discovered in the FreeType library, exploited via the tt_var_load_itemvariationdata function.

Published 9sem1 sourceNotable

≈ 22sSpeed

The fact

This flaw allows attackers to force access to unauthorized memory addresses, creating risks of sensitive data exposure.

FreeType maintainers recommend immediate updates for all systems using this critical font management library.

Explore this topic

Cross-sources — 1 source

Auto-synthesis from 1 media source · identified on May 10, 2026