Description
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server.
References (2)
Core 2
Core References
Patch patch
https://gitlab.freedesktop.org/xorg/lib/libxfont/-/commit/b4389e0b1d84a690b819bb27b1439968811a3674
Vendor Advisory vendor-advisory
https://www.openwall.com/lists/oss-security/2026/07/08/1
Scores
CVSS v3
8.5
EPSS
0.0043
EPSS Percentile
35.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-122
Status
published
Products (2)
x/libxfont
< 2.0.8
X.Org/libXfont2
< 2.0.8
Published
Jul 08, 2026
Tracked Since
Jul 08, 2026