💣Exploit CVE-2025-27363 - FreeType Out-of-Bounds Write Arbitrary Code Execution

[Mental_Outlaw]

CVE ID : CVE-2025-27363
Published : March 11, 2025, 2:15 p.m. | 26 minutes ago
Description : An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.