Summary
It was discovered that FreeType did not correctly handle certain integer
arithmetic. An attacker could possibly use this issue to leak sensitive
information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | freetype | 2.13.2+dfsg-1ubuntu0.1 |
| Ubuntu · 25.10 | freetype | 2.13.3+dfsg-1ubuntu0.1 |
Vulnerabilities 1
-
Medium 5.3
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…
References
-
report
https://ubuntu.com/security/CVE-2026-23865