Summary
It was discovered that FreeType incorrectly handled certain variable font
files. An attacker could possibly use this issue to cause FreeType to
crash, resulting in a denial of service, or obtain sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 26.04 LTS 26.04:LTS | freetype | 2.14.2+dfsg-1ubuntu0.1 |
Vulnerabilities 1
-
Medium 6.5
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e73…
References
-
report
https://ubuntu.com/security/CVE-2026-50811