https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-23865.htmlhttps://patchthecve.com/cve/CVE-2026-23865.htmlWed, 17 Jun 2026 10:22:13 +0000MEDIUM 5.3: An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.https://patchthecve.com/cve/CVE-2025-27363.htmlhttps://patchthecve.com/cve/CVE-2025-27363.htmlWed, 17 Jun 2026 09:03:27 +0000HIGH 8.1: An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a shttps://patchthecve.com/cve/CVE-2025-23022.htmlhttps://patchthecve.com/cve/CVE-2025-23022.htmlWed, 17 Jun 2026 08:51:29 +0000MEDIUM 4.0: FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.