libXfont

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

libXfont records in CISA KEV

No libXfont vulnerabilities are listed in CISA KEV.

1 record

TI-2026-32816 CVE-2026-44950 · GHSA-72vv-3gwg-8289

MEDIUM 42

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00262 Published 2026-09-10 Fixed in 2.0.3-150000.3.6.1, 2.0.7-160000.5.1 +5 CWE-122