- How many CVEs does FreeType have?
- FreeType has 98 published CVE records since 2006, including 5 in the last two years.
- How many FreeType CVEs are in CISA KEV?
- Yes — 2 of FreeType's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which FreeType products have the most CVEs?
- The FreeType products with the most published CVEs are FreeType, freetype2, platform/external/freetype, freetype-demos.
- What are the most common weakness types in FreeType CVEs?
- FreeType's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-189.
- Are there public exploits for FreeType vulnerabilities?
- Yes — 43 of FreeType's CVEs have a known public exploit.
- How many critical FreeType vulnerabilities are there?
- FreeType has 31 critical and 26 high-severity CVEs.
- What is the average severity of FreeType CVEs?
- The average CVSS base score across FreeType's scored CVEs is 7.5.