CVE-2017-8287

CVE-2017-8287 is a critical heap-based buffer overflow vulnerability in FreeType 2, specifically affecting versions prior to 2017-03-26, due to an out-of-bounds write in the t1_builder_close_contour function. With a CVSS score of 9.8, it presents a severe risk, allowing unauthenticated attackers to achieve high confidentiality, integrity, and availability impacts over a network with low attack complexity. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.