FreeType Under Attack: Critical Font Parsing Flaw Exposes Millions

A serious security flaw has been discovered in the widely used FreeType font rendering library, identified as CVE-2025-27363. This out-of-bounds write vulnerability affects FreeType versions 2.13.0 and earlier, occurring when parsing font subglyph structures in TrueType GX and variable font files. If exploited, it could lead to arbitrary code execution, posing a significant risk. Notably, this vulnerability may have been exploited in the wild, making it crucial for users to apply security updates immediately.