CVE-2025-23022: 
NixOS vulnerability analysis and mitigation

FreeType 2.8.1 contains a signed integer overflow vulnerability in the cf2_doFlex function within cff/cf2intrp.c. The vulnerability was discovered in January 2025 and assigned identifier CVE-2025-23022. This security flaw affects systems running FreeType version 2.8.1 or earlier (NVD, Ubuntu Security).

The vulnerability is classified as an Integer Overflow or Wraparound (CWE-190) issue. It received a CVSS v3.1 base score of 6.2 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The flaw specifically occurs in the cf2_doFlex function where a signed integer overflow condition can be triggered through specially crafted input (NVD, Debian Tracker).

The vulnerability can cause an application crash, leading to a denial of service condition. The impact is primarily focused on availability, with no direct effects on confidentiality or integrity of the system (Red Hat Security).

The vulnerability can be triggered through specially crafted input that causes a signed integer overflow condition. A proof-of-concept exploit has been documented in the original bug report, demonstrating the overflow condition in the affected function (FreeType Issue).

The issue has been marked as 'fix deferred' for various Ubuntu releases including 24.04 LTS, 22.04 LTS, and 20.04 LTS. Users are advised to wait for official patches or updates from their respective distribution vendors (Ubuntu Security).

The vulnerability was initially reported as a fuzzing finding for an older version of FreeType. The maintainers have noted that the affected code is approximately seven years old, and newer versions may not be impacted (FreeType Issue).