8.5
High
CVE-2026-56002 A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers…
Description
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libXfont2 2.0 | earliest → < 2.0.8 | 2.0.8 |
References
- gitlab.freedesktop.org gitlab.freedesktop.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified