CVE-2026-56002

Опубликовано: 08 июл. 2026

Источник: nvd

CVSS3: 8.5

CVSS3: 8.8

EPSS Низкий

Описание

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

Ссылки

https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/b4389e0b1d84a690b819bb27b1439968811a3674
Patch
https://www.openwall.com/lists/oss-security/2026/07/08/1
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*

Версия до 2.0.8 (исключая)

EPSS

Процентиль: 35%

0.00428

Низкий

8.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2026-56002

CVSS3: 8.5

ubuntu

23 дня назад

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

CVE-2026-56002

CVSS3: 7.3

redhat

24 дня назад

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

CVE-2026-56002

CVSS3: 8.5

msrc

23 дня назад

libXfont2 PCF Font Parsing Heap Buffer Overflow

CVE-2026-56002

CVSS3: 8.5

debian

23 дня назад

A heap bufferflow in pcfReadFont() due to missing glyph bounds checkin ...

GHSA-r49w-hq6h-2w8q

CVSS3: 8.5

github

23 дня назад

A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.

EPSS

Процентиль: 35%

0.00428

Низкий

8.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-122