Summary
It was discovered that FreeType had a flaw in its CID font loader. An
attacker could possibly use this issue to cause FreeType to consume
excessive memory and CPU resources, leading to a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | freetype | 2.11.1+dfsg-1ubuntu0.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | freetype | 2.13.2+dfsg-1ubuntu0.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | freetype | 2.14.2+dfsg-1ubuntu0.2 |
Vulnerabilities 1
-
Medium 5.5
Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader
A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeate…
References
-
report
https://ubuntu.com/security/CVE-2026-95512