VULNERABILITY INTELLIGENCE

CVE-2022-27470

CVSS score7.8 HIGH

EPSS probability0.99%

CISA KEVNot currently listed

Published2022-05-04

Last modified2026-06-17

Description

SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.