Approved changes feed: RSS · Atom

cpe:2.3:a:x.org:libxfont2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorX.Org (4cd053ee-09df-594a-873d-dbd09ec2f899)
ProductLibxfont2 (4ef2e950-3322-58fd-a2ba-6123e5820e4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56003 vulnerable 2026-07-29 01:00:28.708510 libXfont2 computeProps Property Buffer Heap Buffer Overflow
HIGH (8.5)
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
Published: 2026-07-08T09:25:41.723Z
Updated: 2026-07-09T03:55:47.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56002 vulnerable 2026-07-29 01:00:28.708215 libXfont2 PCF Font Parsing Heap Buffer Overflow
HIGH (8.5)
A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXfont2 before 2.0.8  allows attackers authenticated as X client to execute code within the X server.
Published: 2026-07-08T09:12:51.480Z
Updated: 2026-07-09T03:55:46.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56001 vulnerable 2026-07-29 01:00:28.707754 libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
HIGH (8.5)
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont
Published: 2026-07-08T08:49:24.706Z
Updated: 2026-07-09T03:55:45.984Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.