Medium severity5.3NVD Advisory· Published Mar 2, 2026· Updated May 1, 2026
CVE-2026-23865
CVE-2026-23865
Description
An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841cnvdPatch
- www.facebook.com/security/advisories/cve-2026-23865nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2026/03/03/8nvdMailing List
- sourceforge.net/projects/freetype/files/freetype2/2.14.2/nvdRelease Notes
News mentions
0No linked articles in our index yet.