Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: libXfont2 Clear all filters
TI-2026-42556 CVE-2026-59679 · GHSA-g44m-wpf7-gr7x

fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2

Priority MEDIUM 41

fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from n…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00256 Published 2026-09-10 Fixed in 2.0.3-150000.3.6.1, 2.0.7-160000.5.1 +5 CWE-787