CVE-2026-56001

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 8.5

CVSS3: 8.8

EPSS Низкий

Описание

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

Ссылки

https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/be0b08e2d354138d3222b4490e2a77c6ee42f778
Patch
https://www.openwall.com/lists/oss-security/2026/07/08/1
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.0.8 (исключая)

EPSS

Процентиль: 31%

0.00381

Низкий

8.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2026-56001

CVSS3: 8.5

ubuntu

23 дня назад

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

CVE-2026-56001

CVSS3: 7.3

redhat

24 дня назад

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

CVE-2026-56001

CVSS3: 8.5

msrc

23 дня назад

libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

CVE-2026-56001

CVSS3: 8.5

debian

23 дня назад

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 ...

GHSA-j726-7g32-78m6

CVSS3: 8.5

github

23 дня назад

A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont

EPSS

Процентиль: 31%

0.00381

Низкий

8.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-122