Re: The Hacker News / Regarding Security Advisory CVE-2025-27363

Werner LEMBERG <[email protected]> Thu, 13 Mar 2025 05:24:40 +0000 (UTC)

Newsgroups	gmane.comp.fonts.freetype.user
Message-ID	<[email protected]>

> [...] the advisory from Meta also mentions that the flaw may have
> been exploited in the wild.
> 
> Would you be able to share some details on this, and how widespread
> the attacks are?

I have no idea, sorry.  Maybe Meta is willing and/or able to give more
information.  However, the formulation 'may have been' in the CVE
doesn't sound as if they know whether this actually happens (but maybe
I'm wrong and this is just the 'official' CVE language to avoid being
responsible for anything :-)


    Werner